NSA Office of the Inspector General Releases Three Reports 


17 February 2016 


The National Security Agency (NSA) is releasing today three reports by NSA’s Inspector Gener 
about the Agency’s compliance with a current and former statute authorizing electronic surveillance 
The reports detail steps NSA has taken to adhere to the law and highlight the importance of these le 
authorities to the Agency's national security mission. They also reveal some procedural and other 
deficiencies that have been subsequently corrected. NSA reported the incidents to Congress as 
required. All three reports - more than 300 pages total - confirmed that there had been no cases of 
intentional violation of laws. NSA released the reports under a Freedom of Information Act request. 
They are being published on NSA.gov to help raise public awareness of the Agency's foreign intellige 
mission and to highlight the Agency's ongoing commitment to compliance with the law. The NSA 
Inspector General’s rigorous, independent, and continuous reviews are an essential part of the Agen 
extensive oversight. 

These reports, issued over a five-year period beginning in 2010, concern NSA activities 
conducted pursuant to two authorities: Section 702 of the Foreign Intelligence Surveillance Act (FISA 
which authorizes targeted surveillance of foreign persons located outside the United States in certaii 
cases, and Section 215 of the USA PATRIOT Act, which was replaced last year by the USA FREEDOM / 
NSA itself initiated two of the reports, and one was requested by members of the Senate Judiciary 
Committee. Below are highlights from these NSA Office of the Inspector General (OIG) reports. 


NSA OIG report ST-14-0002. This report, issued on February 20, 2015, was compiled by th< 
OIG at the request of members of the Senate Judiciary Committee. The OIG reviewed the controls 
implemented by NSA in carrying out activities pursuant to two FISA authorities. The first was Sectioi 
702, which was enacted as part of the FISA Amendments Act of 2008 and authorizes the targeting ol 
non-U.S. persons reasonably believed to be outside the United States to acquire critical foreign 
intelligence information. This collection authority is one of the Intelligence Community’s most 
significant tools for the detection, identification, and disruption of terrorist threats to the United Stab 
and its allies. The second authority examined by the OIG was Section 215 of the USA PATRIOT Act. 
Pursuant to Section 215, NSA was authorized to collect in bulk certain telephone metadata. This 
program operated from 2006 until its termination by statute on November 28, 2015. Section 215 Wc 
amended by the USA FREEDOM Act, which was enacted on June 2, 2015, and became effective on 
November 29, 2015. The USA FREEDOM Act made significant changes to NSA's authority to collect 
telephone metadata pursuant to the Foreign Intelligence Surveillance Act and was not the subject of 
OIG's review, so significant portions of the report are no longer relevant to NSA's activities. 

The report presents a detailed, comprehensive picture of the operation of the Section 702 
program. Specifically, it describes the extensive internal and external oversight and compliance reg 


including access restrictions, training requirements, and technical controls - as well as limits on data 
retention and dissemination of information. The report also notes a number of unintentional 
compliance failures and describes the controls put in place to mitigate recurrence. The report furthe 
notes that Section 702 contributes significantly to NSA's mission. 


NSA OIG report, ST-11-0009. This report focused solely on Section 702 and was issued on 
March 29, 2013. It reviewed the system of management controls that NSA implemented, including 
training, access, and multiple levels of review and oversight. The OIG did not identify any areas of n 
compliance. It recommended several areas in which controls over compliance with Section 702 coul 
improved, including a lack of clear guidance to analysts, inadequate documentation, and insufficient 
training in some instances. In each case, NSA's Signals Intelligence Directorate agreed with the OIG 
recommendations and implemented corrective action plans. 


NSA OIG report AU-10-0023. This report, which covered only certain aspects of NSA's 
implementation of Section 702, was issued on November 24, 2010. Specifically, the report reviewec 
process by which NSA transitioned from collection pursuant to Section 702 to other authorities unde 
FISA. The OIG identified the lack of a standardized process, which created the potential for gaps in 
lawful surveillance coverage. The Agency has since implemented an improved transition process. 
Moreover, Section 701 of the USA FREEDOM Act subsequently clarified surveillance procedures in th; 
regard. 


The National Security Agency is tasked with a complex foreign intelligence mission and is 
dedicated in its respect for U.S. laws and policies. There is a robust internal and external oversight 
structure in which all three branches of government play a key role, as well as a rigorous internal 
compliance program. The three NSA OIG reports published here are intended to help raise public 
awareness of the Agency's mission and to highlight ongoing commitment to compliance with the law 
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(U) NSA OFFICE (SSF THE \HSmmOR GENERMNL 

(U) TllfceWS^OfflSffiee of the Inspector CSaitard] ((tQttGJ) ©sndlitiiss autfltts, iw^i^(iaBS,ihsppetitoaHS,aaridpfmoia] 
studies. Its nrasabaniis to ensure rtteiiwtggiliyy. effi&bieny y ,aaddeffifetiMetmcBS offi®& operattwiam, pnowicfc 
intelligence ©waragiftt, potentt gainst ifiaudi. waa&te, taialdiintiHBinanggicneiciiit of resources, aid ensure tHuttN®v\ 
activiitees are caoniliateetl iiuaron|c|bilaaneewithltlt(hfcilaw. The OIGadte® same* aasamromhbdstaMiian aaastHngi^^injcy 

employes®, dkifllumaaridnriiiiititp.y,wtth !<roampiplatstt arahdjupBistotms. 

(U)) lntallig$aroee OvenajjgHt 

(U)Tte(SOGQ®ffie©fltfthlli^hiaKsi(Qv€>vightghjvrewi!CWS NSA fl ss most sanatiiwc aidiHii^mkkiprxggaains for 

compliismujE wMitltecliaw. 

(U> Audits 

(U) TlfoeGDCOTBtffiee of Audits \wihimthhdDCD(Kpi|£md£de$ida{iepda3iiteHissffisse38ntents ofprograrm aroi organization®. 
Perfomwfflms; axifitEseffuhlatnctliibffiflftotomsssarBiicfefftBeitB>cy of entities and programs and assess v^fecbbciNlSSA 
operation co«m(p% witiiffddcitelppbliiascs. Informattmaii Tedimdhgjy iauldtSsddtaorhhK^'hdtiieincfTlToivjiictiignBKmcet 
customer reqpiaieraeunt s.white!caidrotmiingig to inforaaatitorxiasHiiataueesBtadidiaMsAAliiaiidit;s'®m)Ddudtedted in 
accosiama; wiitflii standtamils esaaMlrSiudi C®rcqpiTdlhrr (Q*n®rail ofttte United State®. 

(U) Ivroesttggrivboss and Speeded I Inquiiiress 

(U) TlteOGu (QflffuK: dJiin^gaadiiMisithdmiatifaera ^s^9teforIaE<recehg!i^di®dtaagiitgi®oqMB^tesfsrfesBiaretaiice 
and CManrpJlahtts atiiuittfi&add,wvtaac.ii»kiihHai3BM^OBraii t. Invesdgatibt® amf sjpeiailiriqqirieieananyihebe 
underttaiton asairnsuMt of such narpieslts crnidcorinpplmHtfiitiiriotUdgigiininppntiiSLLBpjpsh dtettoeqirapLest of 
managomsitt, aastttereeuitl t of questions ttatt ssuf&eeddiiirig griHppaiahsn andidudiki! t sjrait Ae lioithnttnYiei v c of the 

Inspector Gemenail. 

(U) FieHoU InspfficdtociBS 


(U) TheOtffoE of Field Iht|}mtttmssQDa(MlatiatSsssieerTOiawsaapp£trt of the OIG"s annual plan or % mamagaanmitt 
request. Inspectoral® yikllil aoouirae, up-to-dkte.' iirtfiaimaitan mntttexfiffeQtiatETsssiiHiicfeftiBeiepcy of field 
operations ami support pagpanss, ad tong wiith an assessment of complrnmae mitth federal policy. TheCffifoEC 
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OFFICE OF THE INSPECTOR GENERAL 
NATIOMm.SSHOIHlinmGENCY 
CENTRAL JSEfflJRlTEVSEERTQEE 

24 NovemHasrr 201® 
IG-lHSOSv10 


TO: DisroiiKiurara^ 


SUME03JT: (U) Auditt of the- FISA Amendtaams Act (FAA) §702 Detasklihgg 
Requmsan®nitets (AU- 1GHSHH23))— ACTION MEMORANDUM 


1. (U) This repsntt suimniatraees the resmltfes of our auditt of the FISA 

AmendnmsnMs Act (FAA) §702 DetasHiiigg RequuiearrKnitH s (AJJU-10-0025)) and! 
incKJogHratoss mamagpmritit’s respK>m>ee to the drdfe repmitt. 


2.. (HU// IRD) UQ) As requiirBdd by NSA/CS^ Policy' 1-6®, NSA/tX2ES3 
Office of the adfiisnss on OIG auditt recomnmBntMhtiums are 

sutigpit to momtoarhngg and! follow-upp until! comqjibttoiin. Thenfforee, we aslk 
than you prawiidfc a written stattuss repemtt conffiHanimgg each plamnesH coramtiwee 
actShon cadagguiiedd as “OFfiM!"’ If you propass that a recomnmmddtitiun be 
comaiiteedd closed!, please prawirtee smff&rientit infortmaiamm to shraxw thatt 
aettmares hme been talks® to coriraKtt the ddSiuenayy. If a plairrmadl aettiian will 
not be conmijdtabek:! by the original tarnpat comnplteiixBn date;, please: state? the 
reatsan for the delasy and pretedte- a revisedl targ et conDpifettran dates. Stains; 


repontte stoenlttl be sent to 


Assisted t InspeolOrr Germed! 


forlRriUrwv up,. at OPS 2B„ Suite 6247;, witMhn 15 calendlaar days; after each 
tangpt comjdtetiam dates. 


3. (U j fiP&SBGf We apflnmciate the couuttisyy and coopetetbon 
extaaidMi to the amdittnrss thironiad iroUt the rev iiaaw. For acMtiimalil 


thi Kouadirou 

^ irfonmakkin, pleas e- courtt^tet j 


1 


on 9635-0957 or via e-rmnall at 


(b) <3)-® .L. 86-36 



In^jEHttur Generail 
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(U)) TABUIE OF CONTFBWTES 


(U) execujtiime smmmy . 

I. (U) IINITRODUCTION.. 

II. (U) FINDING and REcmiimHsmmH 
(U) FINDING: Gaps M 
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(b)PHFLL£86-36 

(U) APPENDIX A: Abcujtt the Auditt 

(U) APPENDIX B::E)^$m®l!ysis 

(U) APPENDIX C: FulllTfestt of Manageirnianilt Rteapuaraees 
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(U)) OVERVIEW 


(U) EXECiurmuE sumiwwrw {b> ((3)>=©.IL. 86-31® 

(bj) m -!fi® use 3024 (i» 


(9//SI/ /R.IEJL TO D-SA. tTWEHf Secifoan 7 ©2 ©ITthe Foreign Inttedllgpnaee Smuvailllainee Act 
(FISA) AmemfonEffitits Act ®ff 200® (FAAJi, has steaiggfcfenastd Signtdts InMllgpmcBs 
(SIGINT) coUettttdm, panttibuMd^ly agaimnffltt temraniRtt tangos, Fromm Septeniisesr 200$ to 
Mardh 20 1L@, the nmiriterr of SIGINT reports thatf. imeorporafeti FAA §702 soimr’ced 
colknotton | toi 


(IFS-pli/iSI/ / NF|) Undear the law,, colDtotamn umefetr FAA §702 must ceasae in cerfeain 
circcumaiaoEcs, potertiafl#y resoiltiigg in & gap in cowna^e. To regaiin covec^e, NSA 
mustt tranxittonn to anKSfilkai' amtftarittyy for contfiauedd colfattiamp, susdfe as a FBI FISA 
Outer. The Agency does not has®; a coimkhntt process to ensures a seaunnlksss 
tnanatiiSkan from FAA §7®2 auttiiwitiyy to FBI MSA Ondtass. 


(U)) HIGMUJD&fTBS 


(U) Gaps.Jn 


coverage exislt 


(h)(3)-P.L. 86-36 


(T3//31//K£L 'JO UisA, FVEV) Anallyass of deteMiiag for FAA §702 compiiiaiaee 


(U) &K|j(hIflcan ce Qfef 


(EMM f 
ts? -UK SU -! 8*i 


(b)(3)) ^£0 use 2 024(1)) 


tS///OjE//fFEL TO USA, Need for staimferctlzEEtl OTcc eesfef 

(TO//OTKVT-ryj The Ageraew ladtas a sfeaittimdtMgdd process f 


36 



(U| , |^0^j Managemeinlt Btesptnt® 

(U \ ( IfO B LUTC H The reoMmanEcnoldatinn is being addnessedd by maasr^ge merit. 

<b)> (1) 

_ __ <b)) (3| L. 86-3E6 

TCM P S ECREI jj gQSEM^^ <b» (3j -s» use 3024 
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i. (U) iNimBSiMJGcrr^ 


(U) Badtggtmndd 


WUw 

(b)) $3) ->P.L. 8fc&36 
(b# (3>-®> USC 3024 fri) 



(b) (3J -JP.IL. 86-3$ 


(T^/ST//WF) Seciigm 702 oftflte Foreign Intfcdlitgfmee Sumwallteiee Act 
KMEBAj) AmendtaiBantts Act .^0J2.Cg0B8 (FAA)t, enfaa rnKESs smiTOmilkonee ag aimnat 
foreign nattftmalds ouMitte the 'United States.c j 
1 f §7@2 gffe©tgixt% breafifarodd 

access to cniticdl tangptfes of inteussttt, pamttoxnMBl^y tenmaistSs. Fromm 
Septentiwr 20tt£,, whem FAA was impdkreiBiitetdd, to Mandh 201®,, the 
nmmiiEir of Sigmdfcs InMl l^aiaee(^$(BBM')) repattts that inctaqptmaMd 
§7®2 sountced. caittectiotn |1 I 


* 1 *'* v ' «' 144 **■*'” 1 - -- 

m a) 

(bj (3| L. 86-3® 

(b> (3)--5£D use 202-4 (i) 


Coltecrfton umdnr FAA §702 mustt cease umafear certain 
circmraBtaamses. Detaailingg is reqmifEte wheim a ta rget is detenrrrihedd t o 


be entering or to hawe entente the United States J 



Coliestttoma&ioo mlldtttctease whem a target is foumti to be a UU..5.. 



! To wgma CQvemfg? of a imml* eoJIaatbm 


mustt tramstiilswin to anadter auttiawitijy, for examplfe?, a Federedl Bureau! 
of Investjgifiition (FBI) FISA Older. The trarsitfaMan from FAA §702 to 


amodter ararttanritby may not be seamritesss, tketeby creatthgg a gap in 
covaia^ge and poterttaM^y caoitarrgg a risdk to U.S.. secorrtyy, This auwffitt 
assassedd the circMuresaaoees and extemtt of the FAA §702 coverage gap 
by exaehhihgg tadkiijg and detesktingg recxoisdis, FBI FISA date, tedffic 
colterttte and pomggxd, and SIGINT rqpaattmgg. 


(U) FAA $702 

(HS^/Z/giy/ilF^F) FAA §702 alims NSA to use the asaktonee of U.S.. 
telecranmiraiiralaOnsns and Internet t senwree pimmifoss to tanjgat nonn- 
USPs outtsife the United States. After the Attsnneyy Gemenadl and the 
Dimntor of Nattiramdl Intel liggTKteefifdeaa joint ceurtifiEfflition that certain 
stattiKOmyy reqainametiMs h« beam met and the centffftmkion is 
approbate by the FISA Court (FISC), MSA may condmiett foreign 
intiteigpncee smmteiliamee of the content of commmmwa&trons. The 
centtffdaaition indhdiss an affinmnaatoon that the sunraealUannee tamgflfcs om% 
n<om-DIlSBs reassanahbly befowati tto be outeLfe the United States. The 
centtffira&ition is suttmiittdd to the FISC and typiadl(y is apprnwerii for 
one yean. Acqaakitaxnn uuater a ceteffcaaition mustt adtterBe to taegathgg 
and mkniiniizatiMin praeasttuees appntvedd by the Couiatt, As ®f Augustt 
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20110,1 NS A was amtttoariiedd to condmttt FAA §702 colleertion umtar 

EZ_fe^tote s : 


(Wi)) 

(fe)> (3)-p,aL, ee-^6 

(b» (3)-€®D tuec S024(iii> 


(U / (FOUO) Other, FISA atffrtteariliihes pircwiijfe altamfdtisre meanns to 
obtain coMecttrann againnstt foreign iinttii^gBore tampste whom NS A must 
stag) colleicttom ((ttfctdsjk | purmiaitt to FAA §702. 

*((U) FAA §714 

(U///FOUO) Other &c^MitimssTiteggtitiggU$S?&s($Miside the 
United Stoztes. A FISC Order is repaired!, but sumealUamee 
tedkniipiess are not rewewail by the couattt. 

• ((U) FAA §7<®5fo 

(U J' ffiBUfQ )) Mint dfagtlmttitms and Concurrent ApfiMcertmas. 
Whem a FISA Order that arattimrizEes snuroealltenee of a tang^St 
irraiite the United States is in places, the Attomreyy Geraacdl cam 
aratthwizEe tangattrigg white the USP is reawrafebly betewsd tto be 
ouMtfe the United States, 


(b» (1) 

(b> (3))86-336 
(b)) (3)-5B0 USC 3024(ii)) 

(U) Increased use of FAA§7!2AUttto»ityy 

(8/ fSMj -fiSSb TO USA, FVEY) Accondiirgg tto ansdij&fcs in the Sigmdte 
InfeUiipnaee Directorate (SID), collecldnm uumdetr FAA §702 autttrariiiyy is 
pisdleDtiree and grew in the 19 montflhs bettwean Septenifeer 2O0<® and 
Marclh 201®. Inaresaseeld tasfiihig usndaar FAA §702 autthxrilijy has 
resilttdd in inoraiasdd SIGINT repntbsgg. The Agency has als® 
expert emedd an inaraaase in comgilkmeer-aktlstied defeacWiiiggs of 
setectorBs. 


• ((U) FBI IF1SA Order 

(S//SSI///CaML The FBI is antttknrriedd undtar a FISC 

Order to petrlfemn seantdiess and electtxoiktc siawealUsBoee agaiktet 
&ggftt§ p@ww, Pl§€ tefetket wa^her f--—' 

(kn«swm as the Raw Take Sharing; Ortfcp) dated JMiy 2002, NSA 
is afete to receive most FBI MESA coieEttcanu. 
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(U) Tasking 

TOUMM, FVBY) TasMipg by gfelecttorif 
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(b) (3) -a? 1 . L. 86-36 

(fed f^3) -SO BSC 3024 


increased 

W»" 11 

r i|(U| 


|(U)| Detasking TO usA, FVEYI compliance -reiatedt detasking 1 

ts//m//fei 


sign 
1 - 


TO U0/L | 

iticantry incnee astea 


FVEY) Compliance-related detasking 


l 


(U) SKSIUNnr report!!® 



(U) NSA oversight of FAA §702 collltecttton 

(6//C3//17IBiEL TO IIISM, FVBY) In addition to the ana%sifc£ ’ obffi^tanan to 
review the states of theiiir sekmtors, the SID Oversight ami 
ComjdlBaiaee Office {SV) is resporesfelde for moflnitrrmgg comjjriliaiaee witfti 
FAA §702 and tearikhgg deteskMgg. SV momaitors sdkaiteEs thmanqdfa 
. SB&didl tee fe te gqftiplitlhcelf~"~ | <b)) (3 hell. 

| 1 Wtom a Gtegsliatace poafldtem exists, SV contests the 

Tanga tigg Office of PrimEa^y Inteneat (TOPI) aod requests that it® 
peraamrafcl resasaarshh the sdknter befones detekfoigg, SV is alls© 
reqpnBdihde for mahttbaimigg a Proteat Ameniiaa Act (PAAJ)/FAA 
Incident dafcdtesee to rccxard and tradk indkdiants and praraiife that 
inffoenaateon for extarndl oversight by the Depairttmaitt of JosSicee (DoU)) 
and the Office of the Dimeter of NatmaMl Intellsgmc.e, 


86-3$ 
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II. (W) RECOMIMIENDATION 


(U) EIN©IN@i @^§ m 


TOveraSjfe 


<teun=#.-fe.- 


( TStVSft Q WF )A fthougito FM has provided impofrtmrtt SKEW 

collection, ttieeAgency has expefferTProdt)—kace^era pe gaps whenn 
from FAA $702 toanotitneraudnuanitty. [ 



(U) FAA §702 procedumasB 

- flRSy/fW/iftity ty FAA §702 reqmiress thatt NS A adoptt pi®Hsiluees to 
ensurEe thatt its coltertiran tangpt&s are nontJIfifBs reasaoiafebly behew®H too 
be outtaife the United States and to ensure thalt the Agency does not 
inttertinxnnhPy acquiree commmrakatitiQsis knnswui to be pnuiaity dommesstidc. 
NSA must als® esMblfcbh miraitmmtixbnn proceduress that reasonafeljly 
baton©? its foreign intetfflggecsce needs against the piroraogy internets of 
USPs with resgtamt to the collection:, retatijMnp, anul di&sanihaation of 
inffonmafejon. 

(U) FAA §702 detasHairg^s for conntpHaarase 

(Uy / ff8 SM) j In centain ciraum&iainees, NSA must detank sdisxtttres to 
manutbain compiimicee with FAA §702 and approved tanggJtngg and 
mimsinitolMon procoedtuees. Than? am thnase brtoadl reasons for 
detei&ngg. 

• (U) Roamers 

(3;/ ijfMif f RCL TO USA, rVflDg)) The foreign tangpit is inMMljy 
beffiiewati ttobbe overssas, but it is autfehsaigrientl y detoniiaadd 
.ithaLttice target has entered .the Unrated States [" 

m m i- i -—- 1 - 

<b)((3))-PiL.L, 86-356 


• (U///F 0UQ) - USP sfafluiascteMemTtiriedd after tash'mgg 

(SffSLffnEL TO U0A, nfEY) The tangpttt is overseas and 
befewerii to be foreign, but NSA saitasepinaBti^y detemimss thatt 
the tamsfit is a. US® 0 overseas. 

m <i> 

(b| (3) “PJL. 86-36 

_ (to (3» -S® USC 3024 (i>) 

-*r j — j\y_ < fe ukA. rVITnl l P 


tof 
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■P&S/fSFQMcfe NSA detenmi hgss thatt a target is a USff 1 . is 
■foam nag in th® UniMsdl Spates; or I i 

3 I MIA mm &&&; rtfciatek fefrlfeStbtfe'lfcfi fcfcnfefetfenfitWd^l, 


FAA §7CE2 aurthxrit^y and puffins related SIGCNT hasWh^s from alll 
daMtasess. To avoid a bmeslk in coven^fe, otter aurtkwrtitees mustt 
be sou^ttt if the tamgflt remahss of intones* t and is an agentt of a 
foreign power (e.g., §70#,, §70Sb, andjfccrr FBI FISA). 


ft) ih 

(fcl (33 '^P L.. 86-36 


(C) Compliance detasUdmigg* 

1 ^trfmffRSb TO USA, 

JWEYJj The nmmtiisr of 
setentirBs thatt ame 
dettededd for 
comjpliiaraee reassures 
from cdltealfcixnn under 
FAA §702 acitthwili^y is 
small! compinesld witfc 
all ‘SEIMTT sefleettnrr 
taaifei ns as of Mattrlh 

2M0 t | 

hflsrosrarr, loss of FAA 
§702 colleidiioii on 
potoitiafl^y higln- 
intasat sefeittars, 
(ptferlacular flp itte ose 
related! to | | poses a 
risk wham trams item to 
dlMernriilfive covena^ege is 
not ae&ilrcless. 


few/ in context, but potenlfall risk is great 



86-36 


(U) Defining the FAA. §702 gap in coverage 

(TGffsI/qHT)) The gap imcovem^ge iss the coMefltom lost in the ti m e 
betris®Hn deste&Mgg aleteetors from FAA §702 coUfafltbm ararttoariti^y and 
inirtfetem of coDeettamn umdsav aiwottoarr aratthnrrlijy (e.g., §704, §70Sftt, or 
FBI FISA). For nonn-FAA §702 raraprage, a higtoar legaill sttardterdd, 
indiiditUatifeiid profeihiie canusee, is reqpiired to seoanee a FISA onto:. In 
some cases, the Government t may not be able t§* a saaamt&te factfe s 
inffiflasaitt to sattEffy the prdfadtife c auras sttamtladd| | 
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96-36 


(U) Audiitt unSw^a of FAA $708 detsskings 

CW^jOJl//jHnr) To detemnihae the extemtt of the coverage gap$, we 
id©Kliff®ek] eee^DigigiltfcleNratSiko fktdbhitdiiiige nc e (DNI) and Dialkall 
Wumfcar Re©n©riitoinn (DNRj) sdteEttnr thatt was detefleetl to conm[p}y 
wiflfc FAA 8703 after enatEtteant of th# FAA in Italy 20(6®. By 
exarnmning 


]tasJ&h|g r eaanctt s and SV"s 


(b) 

NNN 

(b) (3) -IP. L. 86^86 
(b)) (3» -m OSG 3©S4<i) 


'J i - i 

■ -IP. L. 86^36 


D|Njj aia||Df|iRvSeJecjtdrs 

™ ^ ^ 1* v twit - w 

i IWw s ?t# ct fPf5 s F'SFf tffffWp Jrfiffl 


FAA §702 certifications 






!!■ 


ution of colltedfam under FAA authority t ^N I 


WIblF-' 

(to)) (3)--i£li> S6-<M 


feportiWb 

p35/.//£8y/^IH3Ih B € > USA, F¥IEY) From Septeniteer 200® to Mardh 
2 010 FAA §702 coltedtom contrifetutesti to an incntsessiingg pemge fitgg e 
tif M l ie'llrtfhfe, Weteil: tee iK^^ase Wak Jf^Bm ^J| p§!rgfflftfb[~~ , 
pt^Ht. 


Ql/W/RDL TTga U?tM, FVBff)) 


Mftbentaijte oOISepoartfe witto Contoilinlttioas from FAA 

{Septentteer 200® - MarcEn 2011(f)) 
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(faH^FRIL 86-3® 

(U//F 6U0)) Audit samnflrite foaxiraes o 4qc| b! 1H selteottoss_ 

(SZ/ft i H/REEL TO U3A, CTV)EV) Rio m tti ne utiri'iTer s e oifl R ^defcadteefci 
DM Ifidl PR selectors, wje^fflgjntified | t DNi S&HTors fep 

§<aiM&?r;b^y^itte§tor gajp §ftq^}i,s (s^ AppSffiilix I fer 

0®n s^tetors $$ l&gp 

yf§- : §^> ma,i>Qritv afePA A 8# 02 deteakings in the iamnite (93 pata«flt). In 
addittfcnm; lC J^ seleflfarss aedoitattatl forjO|pere©ilt of talked! FAA 
i702 gftf 


mmmmmmii 




rVWJ'UMMWrTSrl 


ww. 

ftWrltfr 86 --3« 


EM §glggt@f§ by ^gFfiffcafiiqfl 

(a§ sf Marato 


(b)) (1> 
<b)((3S))-FSLL. 

(fa) (3)^SC USd 


leteftHPs a& 

ifi M 

adjaoaaitt diagram, 
The lamge quantify 
(yf takings and 
detank ings 
couplkdl with the 
signafficaitt mle of 
FAA §7(5)2 on b I 
repcm-tiii®,, as wel 
as the high r islk 
that a gafi in |D j 
ocfev-eirage poses, 
prommiite ti ou r 
focmES ouk b | DNI 
d<msidimgg.s. 


(U) ESfedhw 
Colltedtoon Prionrtjy 

tO///flF/EEEL TO) 

(jKM, F¥iEY-)-To urodarstiarid better the piitenriyy of tasking; arad 


E)e-as 

3024m 


forwjartiagg of.collectfom .for these b—Jl s dkaflt Qrs, we obMhcdl the 

IffesfliMfe 6'dlMiidfe (K&P) PH^I&dtOTs uwter rate* 

1CP is derived fretsi < WQ) vatoss: natiamiAl glQINT 
e<aM%diftan prgcdaihcel 


to fs awwi rev 


I K3P values, ra®^ freffi_ 

sefetcttoss that we iiddntifiSdd, the aveoagge ECP was 2.52,, indiicattiigg 
that these setaEttrrcs are of high pmiiaityy. 


(U) Effedt of Gaps on SIGINT (SadlteatitionaaiddFt^cp&cltfligg 


ftr » //jM)I//NF) To detanrime 


the effectte ofFFAA §702 dete^iisgg on 

I sdmtwss 

CZL 


(b» (3J -S; t ■> §6-3® 



TO if 8ECftET/;10n)im^JW€II)e^ \l 

8 


































DOC I© : 4273fitE5 


JMJ-10-0023 



-1 

^-1 

" - — "~ =U 

its uii' - ’ 



Time delay pasa% ^o^rP^daQiitive §§l@@tef% l 

■ 

l 

1 

l 

1 

l 

l 

1 

l 

l 

l 

1 

l 

1 

l 

l 

l 

1 

H 


TOP S£CmWCO ' }SMNTtfliam \ RN — 
9 
















DOOB: 4273MS5 

Au-m-oo23 -mmmmtmmmmm 


(bm 

(feHsHt.L: 9»~a« 


1b) <U 

<lty (3) 86-366 

(b) (-S)-a® use 3o24(i)) 



(fe)((D) 

(k) O)) -p.it m-m 
(b)) (3) -338 use 



TOF arCRCT^COWNI^MFOfLV 

20 
















DOCW: 42 imW 5 


top scciu:wco&w^Ww®f®Hm 


Aw-rn- 


mm 


m M> =sa 

(b)> 43)>-P. £ 1 -. ae -16 


(U) Selectors not Retaslked 





Lacfe of Systematise Procassass f 




Iprodatction Center has faced! 


(b)« 3 )HP.JL, 


ehaltehges in aelMwthgg seamitess eov©t^= off tangos white 
mamataiaiiiiiig comnrilianree with FAA §701 KWMriarfements; I—,1 I 



(bM 3 )HP.iL.® 
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Wffl» 

(b)K(3)HP. IL .886336 
(b)P)^® USC 3024# 



Gap 


1 Selectors fp^cantaga 


Total 


i 


100% 


(bjpHRU-^8 


(b)(1) 

(b)(3)“P.L. 8 


(bM3)-p.L. mm 





2. ^(TS/^!SI^y/WF) TOPIs cam dma&%' notify [I 


3.. After nonaitdl diaty houa^s, NlSA's 


3 


MSMiki^Ss 



-f TO/ftCl/ZffllF) In ada&ttom, in Septentieer 2 CKO®, at the request. of 
the NK-A Director, an Emer getmcv Attofthiariza tion CflmeepS of 


Opgf;srtwms was dirvefisgtstif 


Genfflcdl CoumseU (OG C) to outfibree a detealbeti proceas; for 


afldi the Office ef eeM 


/ (S//SlfrWEL TO USA. FfrW nf 



12 (bjpHP.lL .886386 

(b))«3)hSB USC 3024# 
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(U/ /FOUO) Ha ck of undeirafentflitrig of tlhe hanttofff process 
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(b)P)H®0 USC 3024(i| 


(U//F0U0) Case studies 

tTE/yST/ Swi i 


WTO 

(bM3)HP.iL.aaa63®6 

USC 3024(f)) I_ _4 
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NS A, the Cen trail InMll^aaaeeA^ganyy, and the FBI 
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(bJ(3>)-P.L. 86636 



& ITa//3I//REL TO 



fw 

(b)P)HP.lL.8B63$6 
(b)p)hSD USC 3024(i| 


./■ 







(b)(1) 

(b)(3>-Pi.a®-36 



■WWW 

■ Ajl s y i / t BI ' / ' /. - REL TO UGA;"H WE¥ ) These sdtetnrFS had beeim placed 

tfftjRfr PM %mm^e | ~| 

I Ibeeanaee tfney k*?eee lysed by stwai] pet&gres as%gQtofcdd witft l 


mm 

(b)p)HP.lL.8E63$G 
(b)K(3)H5® USC 3024(iJ 



- fftif <f 1)1 f f P1F) |_ |iniithUby did n6tT4mwv’Wh© t® cofttadT 

aboojtt obteahingg altssimiMwe coverage and weie not (Hear abomtt 
what co uld be obttaahmll from FAA §7(K 5lb tasteiirgg and haw this 
tadkiigg f | MlfiBlfllfoately, the amdl^s 


mm 

(b))WP.lL.^ 


mm 


£ tek-'/sintEMT tro mftA - j P vty - -f 
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(bPHftlL.Sf&ase 
(bX«W5G0 USC 3024(i) 



nw pinsamilness. 



\m 


mim 

inittikted 1 


jtoflrtlv after taa&mag on the selector haJ beem 



a (SI/SIMREL fQ U3A, F& ' T .EYj l S /V itSfcsjl .[to monitor tasked ssfetetacaio ensure foreitamusssnnd 

compliance wttlt the law. 
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(bK^P-t-. 8^36 
{b)(B)-&s use zfmm 


||8){3|ffpi. tyje 



mm 

(bK^F!lL.8SgSS6 
(bM^-SB USC 3024K(ii| 


RecovrarantbEttfori 

EstaMWi 

[when it is deteimiriaotl tttedt 

MiF^PSTfbiHi d**ssh&ti 

from FAA §702 sxDUdcisim. 

(ACTION; SID wiHttn OGC) 


(U) Managornnentt Mss^oocnsee 

§§§ g@ft§yf witte W(ByifJlL.886iB6 

recx{Bmrte^d&<fca©.n. ComeBtiyeeaaritiinirisis umifear wav amdl wffl be_ 

comjjdbstdd as soom as posEsatflde, |__ 
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Atuum- 


sum 


SuKMifiaffelsl comgdktom witMhi thik timdimme is comtingantt upcmm 
dirasTt inwikearneen t from SV amdl SI as they ant owners of missaiam 
compxiMiBnKs that: am dimctly tm£ to the trmsiiitmn process (see 
Appendix C for fuffll text of mameggarieetit commeaiti^). 


(U) OIG Comimsnitt 

(U) PlamBsil aettiisnss meet, the intent of the reeOTnmEfflddhtmn. 


(U> Loss of Colteqatiboin f 


1 


Ht»M3)-P..L. 86-356 


TOtnsm, PVBY) We ato gronjpnttl the lo Istotors 
rewjWeati djy the reasoan for dete&fcmgg. - 


(b)(1) 

(b)(3)-P.L, 86-36 
(b}{3)-50 USC 3024(i) 


\. -:> 




{b|$a>!P.L. 8^3*6 


top sECM^row^mmoow ’ i 

17 

























DOC 1 D: 42734 ME 5 

Au-mmm 




W(1) 

Wj){3)-S0 U8C 30*4(|» 


(U//F©tt^-Strict guintema® on detasking j [ (bM-fy-P-.L. 86-3® 

[S//SI//RJEL TO USA, FVE.Y) Strifctt guidamee from DoJ and OGC 



(U) Action tak 
(TSf/Slf/WT) 


E 


the BfflBUfSAp fHfe e (b)(3JHW-. 86-;S<S 


Attomregy Geistacdl and the aettiing Dtmrftck(rff.NatiiiiraiillirBOiil^igBiece, 



ffHWW [ 1 


NS A learai&H that the FISC 


was 


coneenneeld with the prapffisaeH chadless to the mMhrinftiiQn 
procedures s. DoJ and NS A are expteiiirgg altemafiitHcss to addnesss 
the matter white contdmumgg to operate mater the existing* 
procedUiees. 
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SNR 

DoJI 

ECP 

FAA 

FBI 

FISA 

FISC 


1ST 

PAA 

SID 

SIGMT 

SV 

SV4 

TOPI 

USP 


(U)) ACROWTftMfiS AND ORGANIE^miDCNSS 





fy) Siatefi Nufflfey Sftgp&fin 
(U) DepaittaBJiit of tea tree 
(U) Effectthee (DriltetkiDnPHDKbt^ity 

(U) Foirasjgn InMlIggssaee Suiwedillannoe Act of 197!® (FISA) 
AmendtaasiMs Act of 2£>0$ 

(U) Fedtedl Bpti®du eff Investigation 



ftj) fc TOhfetit r gmm -- 

{U) Protodt Amenikaa Act 

(U) Sigiodks Initdlljgroee Direertmate 

(U) Signals Intfedllggsmee 

(UJ' fiPOUQJ Sigmaife Intelligence Dirantoriate, Oversight and 
CompHiaittee 

IU//FOUO) Sigiteks Intelligence DirccttoBfide, Oversight and 
CorapHiaTitee, FISA AuBihiritMss 
(U \ /:fi"®UO) Taijgalhgg Office of Primary Intenaxst 
(U) Unitail States Peraean 


SNR 

DoJI 

ECP 

FAA 

FBI 

FISA 

FISC 


OOC 

PAA 

SID 

SIGMT 

SV 

SV4 

TOPI 

USP 
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(U)) APPEiwnawc a 
(U)) About tlh© Audit 
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AU-1Q-0023 


<u)) aboiutt the audiit 


(U) Objecttvess 


(U) The arafflit objjsatty'ee was to docunraantt the circnumaiaoee s and the 
extend: of drojqpatl Signals Intedllgpiaee($!BIG INT) coMeettom as a resmitt 
of Foiriggn hjttdlljgasaee Sunmealltmnee Act of 197<§ (FISA)) Amen dinra itrfs 
Act off 20(9® (FAA) §702 reflfidtitjoas. 


(U) Scopus and MetHnanattoifaggy 


(U) Condoottdd. from Febiuiayy to Augustt 201®, the aiudiit examined! 
the gaps in coveiragge whom a sdtedttrr is required! to be dettasMedd for 
com^Uandee with FAA §702 and the measured! effectt of the lost 

covena^ge, 

fU/ naaueswedd cunrartt poflikikss and laws pentahingg to FAA 

§702. We obteahed! access to the Proteat Amariiaa Act ((PAAJ)/Bv&& 
Incidentt datMbsee and rwikmiatl regwaittetl indkifentts from 1® Jfod|y 
20€® (when the FAA becamnae law) ttecou^h 4 March 201® and 
docunaiBsitddd actttudl instercees wham SIGIINT colleciion was stoppsti 
to comg% with §702. See Appendix C- Data Anal^sass for our date 
sourness. 



(U) SID OvetRB^faadCfiftjplipliance 

(Uy yPOUOt To gain an vmdbaBStediHgjg of the Agents process for 
docuxnEaitibigg and rqpantingg indsfcitte ami violattunss.wee met with the 
SV sttdff. We obteinsEd for our amailjssss infoomafaixnn from SVfe 
PAA/iEAA IncMants daMhaee on sdteodrBs that wene deteidedd 
becansee ofFAA §702 resttr®ititkiH.s, 

(U) OfKisae of Generali Couinrastl 

(Uf j'-SOffiJO)' We met with the OGC FAA liaison to gain the ovetell ltegdl 
pensgeetilsiee of the impfcnaaTt&atia n ofFAA §702. We also met with the 
Acting Geittacdl Coumsrfl to discmsss the natures of cofadtemn 
resttrotterms that are inbensntt in NSA’s legal! amtthxDiiiti&s. In additiono, 
we discut&edd whether the cumaartt law is stufiffirihitt for MSA to adkirarae 
its mission goals. 
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$ 


ad 


U /T fTOtJ Gi We met with tedtaireukl leaitosiife j in the 

Jto gain an uradtestaadiHgig 


liipp 


of the legdl, iffdleyy. and comjjdlfewee con^tKuatets in the 

[ _' l aiaa&lac ett yte^n mant. gjsffidfftaU^y retetd t® 

FAA §TO2.; CIS# giflidiefe reefer^ing Pi sdtetfftres thatt wen® det 


KJfcaaE 

LZP 


anuse ofFAA §702 reattitxtiMiHS wdfe ccmdmaedd; | 

Jwherai a seterttor was deffiialiedd was discassedd with 


iajt wsk detatd4j&H 


a%$tfes, We obteihiedd the amadlptfei’ opiminiss abomtt the effect of 
coUfflEttcaan on than' woirik, incloatingg spsdffcc benaflite and obsteadtes of 
the FAA §702 auttt®®Ttiyy. 


Ill.HI.. 

. III llllllllllll II 

s6:3« 

(6)( 3 ):i8a§e 3M4 (i) 


(U) FAA implementation leads 

(Uf /ffiOU Q) We met with the Anal|$ssis & Prodactttdxmn FAA leads who 
aie chaggsH with overssdibigg working; grongss, whodh aie addnsssiriigg 
prattritams with cannyiitgg out work undtar the FAA. They outfllhre effodtss 
on aimd^ttsrc traimirag and coord ira&te with the Department t of JUtateree, 
OGC, and SV. 



sonnel 


(U) Mini Mwk am , 

fU l /M1UQ1 Wie i met with pers onnel inf 

M^aiK^ss the | _mi 

| ' | ta§king databases. We obtained extractions from'these 

danato&ggs to asaitet in gut review-. In aMltton, wt met with ths ~ 


mettniizss team, | 

persmnefel, and~ar^^ 
GovenmaiEee to gattosr adkflittmakl daha conammiigg tasking gap®, 
coUeatbm priianiitiaatioiii, and qnsdlitoitaee measauees rdattotl to the FAA 
§702 sdfflEttjrss of inteBsst. 


(U) Training 

(U/ /*FOU(J>t We todk the Legall CompHiamee and MimEnriezaitekm 
Procedkirees {USSDO 1$) ttaahihgg to o bteairi affoess to certiaain 
datWhsees. In add thou , we afttentiMI b_paining. 

(U) Government auditing s to imitewife 

(U) We comdauteeld tfaiiE penffeamraamee aouditt in acaaffiftamee with 
genmaUtly accept tell govennmnmttit aaoilitirgg stamtindds. Those 
stenaferdds reqainee that we plan and pedfenrm the andiit to obtain 
safifikiHitt. apprqpra&te evidence to jarxnrddeaa rosanafelde basiis for our 
findings and condkssonss aocHaxdngg our andiit objjetttvees. We believe 
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mm 


thatt the evidenuee obteiiiretl pimwidfess aa reaaamafobde barns for our 
findihggs and comdkmxms acotandlingg to our aunfitt objaacttivees. 


(U) Prior Covenagepe 


(U) The Office of the Inspesxttor General] has not perfentireeld any 
piewiinuss aimffiits or insEtpsetidxiiss on FAA §7(312, 


(l)> Use of CompurttefftFffocegggqfe d Data 


fUi To peulfem itn tfafe awliit, we u^stSl data that orkMta &dcl frorna tHy e 

> tflftSV4 FM/5M" Mte&fefifcl* | tf j \ ;::. '(b)(3H».JL.affi3B5 

daMtassees. We ueail the date to condiaixtt a gap amd^ais on sdeettnES 
thatt wene detesheeld for FAA §7(312 comgdlianree reasons. We did not 
determihae the valMiJyaff the&e daMbsee?; howeracr, vwee validatfedd the 
date acmsKss rmuilfpite soumobss to ensnare an acauirate depuatemn of the 
date as used for our amd^sss. 


(U) Manag M gii re rrtt Confrodl Progwarm 


(U/flRSHKSft- As pant of the anotitt, we assaessedd the organ izaifcioh’s 
coHttcdl environrmrati t pentairimgg to the araffitt objeatires, as sett forth 
in NSA/C55S Policy 7-3, linternall Control Pmgmm, 14 April 20(®fs. We 
foumed thatt SV4'fe 201® stetanrertt of asmrasnnee repomtteB thatt a lack 
of ujjRgmbtes of InffomEftiriunn TedhraxWiggy systems and softaare 
appliffiatoan and lack of train ngg and staffing* could impaate the SV4 
miteemo. 
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(U)) DATA ANAOSB6S 


(U| IdeintffftEQtifcion of Detaatfteadd Selecttoss 


f|KV‘L. fiMP 


e 


tfJ-f/ BQUO) We usedi the SV PPAAIfAAA indktert&s datMimse amid the 




as ©f mimttms that mm to m^rnmm 


corngdlmccee witita FAA §7(Q2T 


(U//FOUO) SV 4 iraWWFAA IhrciktoMadattafcriKEse 

[U? pFOUO) We exaamniinadcl the SV4 PAA ^ FAA In<ri<feit£s daMI mep, 
wMdi conMms a rerandl of repmtttbWe inodentSs uimctar the PAAI/fMA, 
A repmtai)We incidentt umdeir PAA (/FAA is one of the followmgg: 


(U// PCJUO) Tfa® coiMluctt of anr$r SIGINT activity (coUeettam, 
pi®eB®smgg, neferttaun or ) u^ii^g PAA collectors in a 

way thatt cortnBWdQe s th® terannss of th® PAA or the teimmss of tin® 
sgatuiiiic GDaa^tO®a&tion u ratter whkfc yoioi an® op®natbi)gg< & Thus indkrifess 
a mp actoi% r that rum counrlorr to th® Directors aiffiSdaitit or th® 
ammte&dd exfriMfcs that d®&nrltee th® prmc®^s for deteiriiiimgg 
fore%j2ii$ss5, tin® mimmiisfflition pnonnEdlucg^, or tin® tamgEtks aatbboizgdd 
for cadltot(bam muter th® cemiifciafeDQn, 

(U/ //-FCW®) The condmutt of SIGINT activity maxqg PAA 

collectors withawitt tadir§g a tagtt£iki&tion in plfc&cos to cover tin® (b)X(1)) 

tar^gtt bet^odfflfcetadd. (^|f£)-P.L. 86-36 

(3//jtm//lfliL TO USA, FV.BY) We reviewed the rmariis in the SV 
PAAj/WM IncMsitSs database from 10 Hully 20®® (the incqpttdmi W 
FAA) to 4 Mardki 201® and detomhadd thatt there weine a totfcril of t) | 
inditfisnSs. 


(U ) /ITCMfiQ) The rerasnofts in the daMbsee ame categmnisdd by incMartt 
types. This alowraotl us to deffimminee thasae thatt met the criteria for 
our review of dettBsHthggs related:! to compHiairree. The relevanlt 
ineiktent typass for furtflhsr review mbs: 


W) 

(bl(3)-P. 


* .(&#0I//im TO U3A, PKB f) Ra 


inth) the US 



0vjf 


56-36 
iC 3024(i) 



($ jUssy flKEL TO USA, HflEB)) Tajfigsfc identiffidd as a USP after 
tadbiigg undaar §702 


(U! /FOUQ ) Incident types sudh as "atetyat enttof” and “taslMiijg 
enrarf” did not rebate to dettasSdbngg to mairattaarn compilEaroee with §702; 
tfa®B#force, we elimitotdd these types of mrandfcs fronDL our review. 


6 (U) PAA was the predecESswrto FAA. 
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(u/ /rouo) | ~ I 

( 3//3I//REL TO USA. FVEY)) I l is the targeting tool used to 
submit and manage Digital Network Intelligence (DNI) targeting 
requests. To ensure that we obtained records ofalld etas kings 
related to §702 compliance, we requested from l ~| tasking records 
a record of detaskings for any of the three following reasons 7 : 

1, User is a USP 

2, User is entering the United States 

3, User is in the United States 

(3//3I//REL TO USA. FV E¥ ) The main purpose for requesting 
detasking records from } ~| \yas to search for selectors that were 
(b)(3)-P.L. 86-36 detasked citing a reason “user is entering the United States” and 

that were not captured as incidents in the SV PAA/FAA Incidents 
database because they were detasked before the user actually 
roamed into the United States. 


(U) Audit universe 

(U//FOUO) We compared the results of the query with the selectors 
identified in the review of the PAA/FAA Incidents database and 
identified additional selectors that were detasked for compliance 
purposes. 


(b)(1) 

(b)(3)-P.L. 86-36 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-S0 USC 3024(1) 


(S//SI//REL TO Ufl A. TVEYl From our review of the SV PAA/FAA 
In ciden ts and | I detasking records, we identified a total universe 
of l 1 unique selectors tha t were detasked for compliance reasons. 
The detaskings covered the I fcAA §702 certifications: 


J We were able to identify both detasked DNI and 


Dialed Number Recognition (DNR) selectors from the SV PAA/ FAA 

Incidents database and detasked DNI selectors from_ 

detasking records. The breakout of the selectors are detailed in the 
following table: 


T (U/ff eU(h [ j did not formall y incl u de a “detask reason” field until an upgrade was performed in February 
2009; therefore, our search withm | { detasking records was performed for the date range February 2009 to 
March 2010. 


(b)(3)-P.L. 86-36 


(b)(3)-P,L, 86-36 


(b){3)-P.L. 86-36 
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P/ / FO^'flB 


{U/ffBWfl Detasfcedi SeUestkfnsB HqySburoee aantl Toffee 


1(3//BI//REL TO USA, FVEY) 

Source 

Type 

§702 

Selector 

Type 

Description 

Time 

Frame 

No. of 
Detasked 
. Selectors 

SV4 PA wvm Incidents 
database 



Complance^fetM 
detasBwigs since Jw% 2008 

July 2008 
to March 

2010 


SV4 PA MVm Incidents 
database 



Complamcediffil tslteuU 
detaskings since Jw%2008 

July 2008 
to Mart 

2010 


SV4 PAmrn Incidents 
database 



Complaiic«Hi®ltetestJ 
detaskiimgs since Mty M® 

July 2008 
to March 

2010 


SV4 PA MVm Incidents 
database 



Co mpliiaince-n^ latted 
detaskings since Ju%2GDGffi6 

July 2008 
to MafloJil 

mm 


b Idetasking record 



Co mplancedi®! latati 
detaskiings since Febni&rfy 
2009 

February 

2009 to 
March 3EDHGD 


|j [detaafetn# 


1 

Complaim©e-ft^feteiJ 
detaskfngs since Fetoarw 

February 

2000 to 
March 2QBHG& 


Total 




(b)(3H*JLSBE63K 


( 8 //;0l l //ftmL TO UOA, HfEY) 

(b)(1) 

(b)(3)-P.JL. 8GS33B5 


(U) AudHt Samflrite for Gap Analogs 




v «»■ 




iSWSCpBfc TO UOA, rVE¥) The focues of our gap antritis was on 


FAAL J 


the 


_. sctezttrrBs thatt wen® dettarftedl for collecttiom for comgdlknaee 

reasasms mater the j) I certificartton ffotrm Febraiayy 200® to Maidh 
201®. Vfm ©jmcemttoated on the sdlmtnts tf_(Dm the fc) [ c enSffiitcatiom 
becamse of the sigtMfattsee .dfGtte ffl^A§702 collecdtotj, ind tading 
nywilteir of FAAL1Z®2 ta^ihjg?, and the kef colej ifcplpiays in | f 
SKMOT prodiuKttioML- W*afan bare st! QUf dediatims regarilngg the time 
ftpfflttne $pt rrttlew and tfce feasts o 4d>| §igteat9-gs on of the amikbilii£y 
0f : reltsdards. rateoessary to condmuctt the am dkais. and t he ma jimityv of the 
IMfwere ), _ Z-f X 1 iMC'e ^reOiet^kedr 
We were unable to conduct an tihlysis ofjj_['stele 


_selectors” We were unable to c&nduct' „ 

becauKee ©f a lack bf .traffic or ta^Mhjg infonmattQxnn or botfin. 


lect 


(S/ /SJi// /BHHL TO USA, FVDYj Qur amrdlyisjis covered botiln titan® gap® 
{ggps in cocep-qeage in da^) and coMaatinin coverage gjjapsjptoro tetedted 
miss ed ©dlfetthbmn as a resoiift of thas loss of coverage) fferr the 


mm) 



ta//3I//REL TO U3A, FVEYI 

r VWiW 




§702 


Selectors ffifewitavati 


Database 

Type 

Selector 

(fibtaiyuary 200$ to 




Type 


Ma 

rch 20 

IQ) 


SV4 PMJFAA lltmaitoirtecfflitteK; 







. 

^^jjdetaslkiiimg records 







(b)(3)-P.iL. 8B&33B6 

Total 

1 
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(U//FOUO) Rtenards reviewed 

{U f f WiO) T© measures the extent of the gap® assamiaedd with 
dete&deekl §7dES sdk>rtt3rss, we evalaiHttdd mmiltpite soranm ^r-df 


I 


inionansatiom. Thfes in fonmafemn was requested fr om SV, | | 

landtheS2l lwe..teQ: Bevte eild.lliiH^. 

fBtiQWKW I ' 


1 




)(3)-P;.k. 66-fJ6 


§ffif#& 863 % 

(b)py^D US©. 3024^) 


(U /fFOUO) 


1L_ _]rec« 


n&) history 

recamofes wen® uasdi to detemrihae the dates of 
CMZ&fffipag^ for the sdkertta-ES. The date indhd&dd the dates the 


seMoioss were tasltead and feasfeeji in {3 | for ExemiSiee Ordar 

1233$ a rad §7GE2 covenmge- 


: fTOSgj F 


I 


'$}) Date were !re(|udfti® from the | | on th® taking 

amd detadtoig ofi the selectors. This altewsti us to drasw a 
3£tween information in n th^4, 


r 


Ita 


r\veen m Formation m.ni p sy , 
he tas king records from f ~ 




reffif of eacfin of the sftedttrss, 


Jdafe to dtttsffitifrfe th% 


*» 


i /REL TO Uli &Ar 


t 


_dat 4 i wtre reqia&Stdd for 

detenrihafttinn of the nmmrtmT of hiteces "of traffic. or "tiaffi ir hitfri^ V’ 


per..day related te §702 f | 

ts&Sft us te dtt% ?aiase irew ite straffs W% ia 

regard to traffic colfectefl L—— 


From thiis infonnmiikin, we wene aBsfe to projj®nt the potential 
colloctiimi thatt was lost dunirrgg gap® in coven^ge related to §702 
comndlBaocee, It alas pmamifeeld us the aMIifry to defesmnime how 


(BH3J-P.1.. fefe-Sfe 


(UJ/ ZPOidP t' Purged recondte 

(U}/tftMfS)) Pung^ reqareats from SV4 to da Mtese e maatagans were 
evaluated f or-igsgxirdds -telattedi to the group of p I seteatuss in the 
ase. The pun^di reeontfe in effect repmesartt a gajs 


in colteifltdm co®emgtge. 


{fe!pyipU,.8g6396 
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sum 



pwewe)- §704^§/7®Sdo tasHsrngg p> 

(O//jQ0f;}T/tEEL TO UOA„ FTuilEiW) Reports weute germraedd fromm f-J ' 
and recmtfe requesssted from SV regard fMffib ~ 

authoniizattaffis to determine if any of thp ^_J| detasfe&ii §702 
sdtesfltorss were swttaatfpffently approved \tnileder tteasee (b){3^-P.L, 86-36 

amttlswraaations, 


wm 

(b)(3)-P.L 86-3® 
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(U)) SID and OGC Managemrasrlt ResparrreaBss 


HTW SMM1L I IUMVII 1 m .JINU I -UIRISi 


SECURITY CLftSSfflGWfffiM* 

NSA STAFF PROOFS fMSITEMW 


TO i EXREG CONTROL NASMBER 

OIG IzOKMHSffi 

lK£&CONYftOf NUMBER 

THRU 

n:::a:^. ::::-- - 

ACTION 

Q] mmtt- 
S(!ffilW TURE 

EXREG SUSPENSE 

SID Itegnoanse to Draffi AsuititilftfjMfft m the 

FffSA Amendments Aatt 7 U 22 Dara^feijig* 

Mmmm 

Cl CUCMT o,,r>DCMOC 

R| INfiO«#MOT®W 

ftEMra/gpgKIsf 

Dtsnunumnnu 


FUKMJHfci (W//rOUO) To pEroiijftetfeSSIBirepposse to the draft report on FISA ArarimuIbiinitBsAoti 
(FAA) 702 Ddfra&ifttg R&SftliiEtetetftg AAW) ). 

BACl^fflftlOTD; (U / F FOUQ) The Audittweinittiatdij at the reqfiu^t of DIIKW&A TFtoeMiddh 
objesLUiw \^sthidh®niiiHieeDt the ckaim^ of dropped S1QEMT asdltoicMm as a regaaih 



disol^io^:: i 

ffih'cl 


fi toflitfieiat mnent (TAB4A 
ic [. | defied t q]' p 


(l^iP.LL^fese 


,) is the ocBWililiatseti §JQd/ 52 and OGC 
#!■ their respens* te this Sgtekcr. 

a i) 

(J 


i) 


W$ SPF maybe clo\\mgmdiiimnilmmkkdEFTUWWICOMIMl/fNOF(MWupon removal ofend(v). 


CMKHMJikWiAmOWtAPPROmL 


OFFICE 


NAME AND DATE 


SUB DIR 


502 


S2 


OCiC 






iii i n ly/ae 


"jeoiaiWietia | 9ty~um 


sts-asrai 


OFFICE 




]3 


FORMAS796TftEV Pi» mm tfOV §§ H SfcSStet#) 

NSIt 75WEM«flflS465 

DsrtoMfftrom; NSAO^M 1-3E2 
Dated; 20070108 
Declassify On; 20 QUO HUB 


b 


C8®G 

S023 


NAME AND DATE 


-P.L, 


SECURE 

RHONE 


966-5 SH0 


1til 5/201® 


itlURtTY CIASWKBMT.ON 

TQff> 


TOIP fimmm f mM$NT//NQFORN 
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L fill SUMMARY 


(U/ffeMflft As requ ested,, this correspondtetrose ptraw/aidses the OfiSa® of 

-1 (Mas of General Counsel's (GG8B®§ statements (stf 

concuimarae {or norwrantmureeDe^) wiitJHn the recommraifttia6i)oncootaaiaadni rth^i©®f&ce 
of lnspect®r<S®Twe4'^s(Q(l®@)s) draft audit reponttairrtltbarhiasitidhDig^pp NSA 
encounter® wtai targets of Foreign Intelligence Sun/eilllarraffi Act (FISA)) 
AnrrrainiilmeitEts Act (FA$)) §702 col lectori nrvusat be de-tasked frortrm thi s colle ctiion 
authority.. This memoraittliiwn also provides OIG wiitHn the iresiultte of jp | aamd 
OGC"s review/ of the draft repontt for factual sasnirranyy. 

il rut coiMmfmemEE with r ECOMiMraikf daito ni 

jWl0il(/Nr-> Reeommfflit&Aition: Esta blish a process for NNjjBfl U..] ~l 

..■ l ^ve^e-for ic^taufes foWi FAA 7§§ 

collection.. {bMtJ 

(b)(3)HRL. 86-36 
(b)(3HS0USC 3024K$ 

(U) Head Aatiamee: SID wiitttn OGC. 

(U) k I§ttoa©sti C©ff$fiit$0n 0@£6©Fi<eur wltfh 

OIG’is neaoaiDTniaeeio ldtidan. Corrodivesastibon . is undeirw^y and wiifbtee Cofip|etB£lted as 
soon as possibUe f" I stlicfflfesSlful compItetctDinwyithin this 

tinrnafeamee is contimpilt uperm dihesstt irwadVeeriBeitit from SV and Sll as theysmss 
ovwra® of misstatn compmtertfes tttaataaee diirr®£t% tiiedttDtbteetitaasjtikbroprgoessss. 


(TSI/S I //NF)) Commraitt: Attt mLOjfrh there is a cuntffln ttRtKpoeess for the Skjnralte 
Intelligence Directorial (SID) l I sQVSfapeage of targets of interest, 

OGC toes not dispute OIG's sulbstanttvee flinrod ihoig thatttteomireat ipipDDB^sddegs not 
appeartto be unkegisalfjy umrielstdodd by SID’s (~ j ptutdrmeh Jf>n 

response to this finding amtl (eeoDmrnditttation^ OGC artKtliiniidiiy/idualls frrorttr slo,, to{ 

jndlud^Opk rsrsmi nnet aiewtog;ing on impmyiimg tile cGrneht fbhfiSSfess_ 

I { coverage of ] } -ttargfets tihckt must be (H from FAA 702 

colifectim QSOandl SI[E |)Q| peto rmell have already to itiatdd tofiiissions to 
establish a clearer>proc§s$ for NSA 


_ _ _ _ _jtoehegeage for selectors dte- 

tasked frarrnn FAA 702 dbllebtittn. OGC airmti l I patQflfl&Tnel lt®&ve b&jigun draftrrgg 
compredteravee storct&ddapi|BeaftnjiQ prpnagtUjiee (SO P) for Infects to folltaaiw Wt/ftiefli 

The SOP.Vpl 


_ i &s ^cprppmpriate. 

W Will lh|l |§ 

witto th© ©f ly§fi§@ |a§ 


} 


(b){3)-P.L. 86-36 


WJFP:t: 86 -- 36 


i|(3)-fP f (r. §8=31 


MM’.L. 86-36 


TOP SE.mm//M)MINT/jW&mKN 
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(bit)) 

(b)(3)HRlL.86-36 
(b)(3HBDUSC 3024(0) 
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necessary to ensure that ttte rrawppxooeesB addresses OlKs fiirratinggaadd 
recommendatibmn. 


®+:L 

{&P49 m 


e (TSf/SH/JN F ) -in tttr® sHwrtttegrrndQl I has rniWated a sarjessetftr^'riig §§§§i6fl§ If©!! {b^mL m-M 
^fflWierfafce rs of the diwacnm anratl branch leadership teams to raise awareness of the 
precis I 1 Tht ptips^ of 

trail hircjig is to establish drsanritaimdi d reiaam IlmdJ Points of Contact ((TOCs) who will 
be able toC&s$i3$tanalysts tlhrough process.. Adirtiltooiaal Video 


Teleconferendhg Center (WQ) sessaomswiill be sdhedulfed to incliuKitettt®9©st&TObteti 
enterprise. 




(TW/SI//ftf ^ Fin ally,, a n e-mail al-ias has been created tttnatt includes technical amd 
policy tofJpfel&s in t) 1 The pimpcs© tfftthiS g roup is to a ssist the dwiaarnaBtdd ftnaaratti 


POCs as they work wiitlHn the analysts on the 


process. Members of the 


group will all so ensure that read lot toon is reached for selectors de-ttasked ffonri 

FAA 702. 


Ill, nof)Dl REVIEW FOE FACTUAL ACiSMY 

{bK3H».JL.aB8&3ffi 

{U//RStifi^ OIG Comnnnaaitt: The OIG does not agree W.iith Ihflyi jb | that all suggested 
changes w®i®due to inaccuracies or misleading stMememts. In most cases, these 
suggested ajtfrap^weeeebased on |Oi t irlbarpe^fettooBS of the repopt and new 
inferraatioDn. W changes to update anraU (?lalBi% areas of the 

report. 


(S B StiHS ^ //NT) — T he follbavwiigg lists areas of the repmrttwhleeedj [fdanfifiied factual 
inaccuracies or misle ading statem ents that should be corrected in ttfn©ffirodl 'rensibam 
of OIG”s report cm M b ftp NSA eimcoumtteiEB wttnermtfcagpafes of FAA 702 

colllection must be de-tas ked fre nrm this col lectern authority. These factual 
inaccuracies do not affec t [ concur rence wittto the report’s recomme ndatiiaijin tftett 
D and QGC establish a new process }! - I 


£ 


]tejT£ 


folllbaAwngg:ooei3tiLitete© 


eitsjhatt must be dmfppEStlJftorn FAA 7,92-cofftectiem. The 


^peQiflC suggested dbf recti (poss: 


(&N*)=P.4- 86:36 


mil 

mmmi. 

(bM3))-5(0 use 3624(i) 


forage i): On page T iirmtttee"“Hiighili§hts ii fe^toon t illhe 



to i p* GcenrijOTMfTO 
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■fQ/jC©lWlN.Dtr'Commueintt; "TFtiisssJfeafe9rn®rrtt ihn^fessthi^6NISJMw«>d«iilti^®/e been able to 
obtain probable cause on all of those sdlecdotrs arativwDdttJ htoa\Bebeen able to 
transimbort to another auttlrailiJy.BBfebeeawshboldlcfcldi^f^^aie^oaDhtifbitiisa^rtion 
all s^tedtoTSB irfna&lIaiimjiimsttancffiSB. 


(U) Conteetiiim22 


$t»(3»P.L 86^3® 




j OCBveBfrge fektst jpUSLJJf# the FINDINME (top 
of the page), iiit states “...ttto© Agency has experietmiast jlL_f j cowerragte gaps when 
transitbmriin® ffoim FAA702 to another aiuitttariliyy'.” 


(WW/NT) Commnistntt: "TfHffisslfeafeamfWrtt ihn^bssthhaWISfiAhdJuildld be able to transits ram 
to anotheraiitttoil^yiriinafllliiiBtteeffia. TIFfes is not the case. Believe we should clarity 
that we cannot ternsittoin aHlasItetois in alll circumstances. Whiitetttee need for a 
Tifgfltrarl&gdl standard!'” is mentiimed on the botttmniGdfpiaipe05,IMIws9wee need to be 
up frarntt wiitlhn the fact than senine selectors will) not ttnameitldm. 


(U) Conf©ctibm33 


( jfliftW/N 0 Effeirifii^a0dH®lii4aen Pri©iii$y (ECP) (page 8): Thiis section states that flhe 
average ECP was 2.52 indiiiaffimBgtltla^t'tlihaNaerapie ECP was 2.52, indiotShcgtltilatit 
these selectors are of high priKHirty/"” 


(3#/ 3 l/flNJ Ff f ) Commneintt: ffltelle aAes we need to add <sanOTt^ttottilfBsslMeOTiegrt.t W e wemittl 

inniagiii^tt^tnrw^t If not ill | | has lift g&as 

ECP that ffeallteirrttotltike 1-3 range, 
on the ECP. 


Probably all selectors are of high priioaiftyy based 


(U) Conte«rtiam44 

not re tasked (page 13): The table at the top of the page 

- - u- .— m 

- 1 (b)X(S})ff?UL. 86-3© 

ffW&WNf) Commnffiffltt: W4e thinrtk it is i mpefitfeairttttbcaeidld aftmthartedhibfetndidatetes 
that the analysts wen® ttsJttitfolafcltithyy did NOT have to perfottrimtharDoag^hresEssardln to 
try to recall why the selecto r wa s mot retasked. Bellow is an excerpt tairri an email 
exchange between (1)K3 9mi |oin| ilim£tgtgpg that th® amal^stt did not haw© toRBSTffnrmn 
research if they diid HOI remember why the seledtor was rratt neafeffitedi. 


PWWNH-S 

indicates Ahatl 
irrarcafes rnar 


(b)P)fPLL. 86-3© 
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■ (TG/ZQ I /K^n We agree wifflHn your asssrrition (titeeaaua^f'^te: sb isirpiptyiartet^ifeHi3btti^^ey do 

not racallll wteth^ppiefieeti to the selectors if they (Eairmrasttre®neent)lBe.r. Our intents am 
was imaat to requineepSBseqqd^e to spend hours tr^imgg to recall! infforrmatonn to answer our 


surwy„ wHfiaJt is wHty there is a “don'tt recair opiwniriirtllfeiiilsrst q&asltior^j^ 

(b!3)-P.L. 86-36 

(U)Conadfem55 

_C\ 

if f/Q l ivun 




(U) Con®tctram66 


fro/ma^rr Needfficriccttisffltgtei^rpceKS^pdigsige 11): The docutmrffinttstattestItiiafet, 

<bpl I 

(b)( 3 HRL. 86 

_ {b)(3j»-SSUSC 


302#» 


pflflgfeWF) CommnB9itt: We thiinrik it is irr^pmitfemliManoMeiartaicBoeTse^otsr^ will 
take lann^rrttxDtriaaaai<l)t®rccanp?»®rtdototbdT8r4)based on tltoe dranjmtteroms The 
prafoatote cause standairoti is higtartttmrtltihsMaddeddaasDratold FAA 702 taskiim®. 

Thiis statonretirtt innpifettilallvwsbboldlcfala^a^/ s be able tottiaroattd^qiiJi pkMy. It may 

tike tfotffi and i left of back and forth between! Ibefoire we (IKtyfaL: §§=§8 


reach the pmstMtite cause standard. Wfereefttiedltisis is addressed in tltoe Case Studiies 
on page 13 but wee thiinrtk it should! be stated up frenrtt. 


(U) Cormctii0r\77 

# * /81//REL) -Footnote 3 (page 14); States that) 


mmmPt eemteiit: 


|f£t: 


86-36 


)-F.L. 86-36 
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AM-m-oo23 mmmmmmmmmmm 


bPP?,L 86-36 


(U) Conffliltiii]m 88 


(T3//8 II ///Mff ^ ) First fftatiagraplh (page US):. ‘’‘TTHtBarral^ate also may not totes been 


4 


ISHD 

(®M3)-P.L. 86-36 

ib){^ u§§ mm 


-fTO/tgi/f/tefft - Commasatt 



(U) Cormcticin 1 ^ 


(TG//Q l ff 1 te| Ffr Actinwn Takam (page 18): Thisse ctitmmotilssmsaa^ th e newpooeEbliriees 

m te | §§^a»ries. 

prowanafe 

relief 


(W/S l /Wr) CesfflfttKt: UfttefitUJi^fefy. 
remo'wsd franm the imew piooedilMes so we wlill imatt see any 


based onftenr©wpp(Doeeldcs®s.OGGC wsawld llrmffid&aaldsoanegaetityyv^ 
and wHwEevwesfe&add 


(blit)) 

(b)XWHP Li. 886386 


(bflPHR.L 86-36 


HI. (iTO OGC- REVIEW KM ffMTIflEML M 3 QIIMM 3 IV 


(W^ feDUO ) OKG Commaitt: The 01© cbbces mdta^eee wiifflir the OOCtttettailt 
suggested dhrarnges were diue to inaccuracies or miisllea<dih^s$££taTeait£s. In rrrmoistt 
cases, these suggested dtrangeK wranee based on 06©’$ inteirpmsEfeatonss of the irepmtt 
and tnew irrnft^m^toan.NAWenBncfeacitinfehe appropriate changes to upatateamratJ clariffy 
areas of the rapamtt 

(GI'/OH/ f fe|r) The folllbOAwngg lists areas of the repmnttwlabB®e OGC ideriiffeetlf^etitalal 
inaccuracies that shouilbtl be corrected in ttneffh^l \xfflrabom of OIG"s naputtoartltfee 
transit!aim gpqp NSA encounters wtam ttetgafc of FAA 702 collecttem nniuslt be de- 
tasked franrm this collectHsam auffircinityy. These factuall inaccuracies do not affiantt 
OGC’s aanojir rence witthi the report’s recommendlatiotm tttafltSSlD and ©SC®$teli!ilish 
a new pmoaBEss_targets tttrcatmioiatt be 


droppatl frarmn FAA 702 collectwum, TFtee following constitutes OGCs gperiiffic 
suggested {corrections: 


to i f 

8 


(blit)) 

(bJPHP.L. 86-36 
<b)PHSD USC 3024(1) 
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TOF SECIUTJ 3 COjVflMil^ ' ^^ 


AU-m-0023 


(U) Conectram 11 



-P.L. fflA 


-f MMF) Hi^Ji^h^Seteeiiffl^p^eg^i): On-pag e T in the "HttfhljgWsr action, tftne 
.report oamrtearnEE a sentenc e tttBatsays tlhe issue of a | 

I l iis currentW uuitTotfearrea^eswJD^&y DoJ. This Salsmefrtnent is 


factually iiimcoTOsaat. In July 2010, DoJ attempted to persuade Ins Fotsigeign Intelllgpra© 
Surveiillance Court (FISC) to allbw tasking tbDODCTttifiniaeuudeleDiiiffiie wars io n of the 

_but fb® FISC 

TefuS'ed'10'ac(^flh'e''p'ifapsed change to NSA’s FAA targetSirT® sBiretfnrthiihnrrifaat^ixin 
procedures that the GoventmmMttpDoppeeeld to address thiis prakHlem. OGC's 
understanding is that tftre FI SC concluded such aafctopewmibti confliict wittti 
statutory restrimtoasso^ FAA legislatiHHm itself. Therefore, D®J is no 

longer r^eawwigghtfeisi issue in the manner nnremttcarraa±l ihntheecbia&fteppidirt. Instead, 
DoJ is review mg two diifferarttditatftdgglaWe/prppopatGathahattett^iln^dlo close the 
transit Pm gg$p. One prapssall was dfraffied iJqyf NIS^ and tltne osHthierr proposal was 
prepared by DoJ's NMctn^l Security Daemon. | 


(U) Cormctikrn22 


(blit)) 

(b|P)HP a. .886386 


(0/ f G I IFMF) InfnHDd^cticam:: On page 2, the “Bntroduialtion" section of the drettre^pott 
contains the folllbtwwmgg sentence;: 

iWHTf u- ■■ u.... “iyn^§fFit!KC aofctet numte^ l | (kn@wh n the R&w Tnate 

IbjUlSlfeic^3b24*fi) -Sharing ®^)c&s£«£i July 2001, NSA is tbl# to rtetivt FBI FISA collectim'" 

(U) As attested, Ifhissasititen^issffetdiiaflVIyiiiaQcatiattte.TlfhseeitdeoeestauJttl be revised 

t8 F§^ 

ffeatWjF) "lUhratter FISC docket rrAer | ~| ((knowmi as the Raw Take 
Sharing Order) aMsdJuly 2002, NSA is able to receive most FBI FISA 
colllecltion directed aaparratt the FBI’s counterterrnnnrsam tSErcgpafe"” 


" TOIP aS0fm/COiVfINlii^OFORAr 
9 
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AU-rmm 


TOF M&mWM®ti^QNT/; f NOrOKN 


(U) Correction 33 (b}PHPLL38©86 

Finsffihjg thatt Gape in flDr fo rget Covatagp? Exist: Page 6 of this sectiionn 
of the draft reporrttamilteiBStltfeie follbwwngg sentence: 

'To avoiidiabDfBS^irtincooeBatggeptjft^reaidbttniliEitiegnuratist be sought if 
the tergal rBmamiss of interest sBiroti is an agent affaffemeB^provesr (§704, §705b, 
andfetr FBI FISA)." 1 

ffiMSI//NF) This sentence is inaccurate as draffltedsjroee it inriidl®ffithaitrtb&8teted 
authranittees ar© ttteajrti^pssib tel ©latottriliQfeieavailab tote itescesiiemraD'eeiragegChi’he 
sentence shouHdi be reviised to read: 


■ (OtfOlfW^P j r 'To avoiiatiaabarB^kirTincoiggBarggeptirt^reaLdbtfnitiEiSigsiurBtist besought if 
thetanugstt remains of interest ssnratl is an agent of a foreign powerr (e.g., §704, 
§705b, FBI FISA, etc.)." 


(U) Correffltram44 


(b)P)HP.lL586366 


$ 51fl/fil//NF ) FirnffiiTgg that Gaps in jDrfo nget Coverage Exist: Page 6 of this sectiiorm 
of the draft repoirttarortiteiiBstllhe folltowrigg statement 


■ ffi#&t//NF) “Foir non-FMK §702 coverage, a hitterIstaaddBdd, 
indtivjxiJgJiaati^dbiP^ cause, is reputed tosecuire aFlISA order.. [ 


(^/9 I //Rffl) Altttmgjih the statement is accurate as dratted, for complteterass OtQ, 
may wsitetn to note threat, ihnsjinrres cases, the Gowarnmwrtt ma^y simff% not be able/te 
assemble facts sufifioiteitt to satisfy tttreeppobbtMe cause standard. 

WPHPLL386336 

(U) Correction55 


-(TG//0!l//llijF]r Dnsmwsiori of lack grorreesi [ ~(6>in pages 

15 to 16 of this section of the dtrafftreppclrtthteiere is a discussion of the dellay 
experienced in regaining cowarage of selectors aessGBbMtetlwit^„ 

H | lirluqgdTie report nyi 


TOF 8 FjnBE^)r€XMJMJfT^OrQ(aWD R N (bMI)) 

IQ (bJP)HP- LL .886386 

(bJPhS® USC 3024(ii)) 


























DOetB:: 4273&4S5 


TOP m FO RN 


AS1-MI-0023 


NSA hadtodtetfa^tlblgeaBOOiiifliitit otrmce.tilTeA^gBO^v |ggnra|tjtrait 



PK3)-P.IL. 666-36 

(bM3)hS® use 3624 


(U) Corff®fltimi66 



■■f W B M/N F ) EHsmBSSomn of "Sttniixttggnoddiaasce on titetasking j ] : On 

pages 17 to 18, the d raffit report saattes th at DoJ 8fld OGC ta©R£rrovided “strict 
gufidfeeira#’ to de-t9gk | | AJtttau^h accurate, as diraffl^tltteereppctrt 

iffiplie^hitQajt DoJ aidd 08EC have dSaarctioafn to alterttteggiiiddaoee.TliiheTfefi®;ethdie 
tteiraftf-erepo tfs discussion of the llegal adless praweteeti by DoJ and OdSEacmtteedde- 
taskim® of j I ife extremely nri^lssBdlrR®. Although tllTissectiiaain of the 

d:^ report notes tlhaft tths&F R I SC has exp ressed ‘'concern" about tttorri^i^aJatiricris 
'tihe ftWerrmtiht fefc&pftsSfa l~ I to NSA's FAA 702 limiting 8fld 
filHimizaHibn pwostreduiefes, ffliefeport %il§ to note wiittln 

the ! | Tssue;- OQC^ iteterstating is Hurt Mt;8>Ulift concI wteH fra tt 

even nhe modest changes pnatpop ia&d^^^J to address one a^psdfoftthe ^J^^ 

7ncoriripi^i^"Wffi""the""current stteAjutnyyffaairaawdrk. Motrmxffl^, for completeness,, 
the repmrtts^Uttlafciso note fctt,©x®m if the statwittar&y Itercgia^e is changed „ there 
may be FourtHnAtaiBeddreieTiIpp^ mairmteHrriiiirgg eit^tcxiJiihotBQcueveijlAnce of a 

U.S. person ©rsefpBS-Eairn I dotted! iitTsidtettteUlMddd States on anytttifrag Hess tham a 
formal protoaiMtefflaui^dteteimiiiiaatiDn. 


TOP SECRCIACOAffWI)^ 

11 

































DOCtB:: 427364E5 


mr sticMiTytmumMnmwiA' 


TOF SIEmTOgOMfMfjiyiVQCeflPU :' { 





DOCDD:: 42731333 


NATIOMML SECUIBRIIW AtOTKQYOEEITFRALSBCCiainfVrY 

SERVICE 


FurtharotttsBiniri^Uon of Wia repwttauttokte NSAis 
WOW™ wMimm tte apjramal ofttoe Inspectecrr 
General. 



(U) IRteport on the Special Study: Assessment of 
Management Controls Over FAA§§fflQ2 

Revised) anti UteiBHueitJ 2S9MtoroUi 2ZQS3 


(b.)p)*p.L. mm 


Classified By:|_ 

Derived From: WWC!WmS22 
Dated:: 

Dedas&iifly On:-2038G39I— 

^opprooeeted for Release by NSA on 02-11-2016. FOIA Case#/ 80120 (litiqationll 

TOIl SMBW//SI//NO FOR-hj — 











DOC IB : 42730$ 


TOP SECRCT/fSb/NOF ORM 


(U) OFFICE OF THE INSRRBETDHR GENEHRML 

(U) Chatteoaail by the MSA DueettaraaoMti titrysstautee. tHeeCMfiee ofttte Inspector Generali eondneiS; 
audits, investigated. iinHgrasttimss. asrdl spsiall sttidfesi. Ismisssom ies to ensure ttteintegriliyy. 
efficiency. ami effectiwaweas operations. prwriislle intelligence oversight.ppeWecngaiaBstst 

fraud, waste?, and mismanagement of resources by titeAg^ayyanitl iteiEffflliaees.cOiatleeHam iJltltat 
MSA activities comply with titaeltow, TfflteGODGatesoseeveesisis an omtefemran. assisting! NSAGS5S 
employees. dkiJSamaMid military. 


(U) AUDimEB 

(U) The audiflfhwtitonnprawddesimaldppaddBtitaa^esMWtot^fftfpgramRnmidiidrganiijalaQtia) ns. 
PeribmanKffi antftteeeuidQtaehdief^TtoeneHSSsndiidffiffeikepcy of entities and programs and ttesir 
intemaS controls. IFh smiaJt badiistdedetaiimitb a hecaurauyacy oftfte Agency 1 ss lfmairaidlststtrtmwiists 
All amdittea*ea'Oflddi!t£t<ikli n mafittolidamctwitli! hta^dntodestaHlibltaitiedyhjid he Comptmsllllai CfeneKdl of 
the IUnkbail States. 


(U)) INVESTI<&ATI (QMS 

(U) The ©MicaUnimiKersaasyytaBiii for receireiing! ompllaiiitss ((ihttHutlhfg aaranyrmoMstippi)atbnut 
fraud waste?, and mismanagement Ihi^i^gitii(ttRnsimy)bbfflnateil?tnbkeiTiii nasppseie to those 
complains?. at the HaspBit of management, asstheereesltll of irregnlaiifliies tfliirtt sinffeealdririgig 
inspeetknB arndl audl tts.oo nta ttbba nititmtis'e ofttte Inspects®' Gemaiadl. 

(U)) INTTELLIGBtKEE OVERSIKSHHTT 

(U) Intelligence oversight isdlesagnoril to insuretH«tA^enpyimtnHBggacieefilthotidosiK(anfip|yl>wisthh 
federal law esffimtii^ocdddsandttroBOlmlidSlSIS4>qitdieseThi'he IO mtsswan is grouinoMI iin 
Executive Order 12333, wBriidh estaifelfeHes Hawradl peibmii^teuiMldeiwhldhcii IC components must! 
accamfi&ii tfnein'missioniss. 


(U)) FIELD INUSPECTI ONS 


(U) Inspections are^^aii^tiiirtlresnews'jllitalsaesesEhEliet'Mfastetrenesaidndtlffmiepcy of Agency 
components;. TTHeHietHti Ho^mtituMSIIH^swBmlalscppitetaK'svithtlnipepentoi<3dnerahal ofttte Service 
Cryptologic EHienaattt santficbtitteKl CraittiJia© joijttljtt Im^^emiwIi^dtelittedyptQlpgito ^Beifeiafeties. 


TOTSECRET/rSl/IMt > n QRN 
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OFFICE OF THE INSHllCIRflRCQCWEaMJL 

NATTIOMM.SECIJRITY AGENCY 
CENTRAL (S3QI3HII]R^ 

29 Marcfti 2013 
IG-1153(6-13 


TO: DISTMMKi 




SUMfflQT: (U) Revised Repcwtt on the SpadMl Staud^y: Assessneaifit of Management t 
CoiWtedks Over FAA §702 (ST-11-«MH^ A®OCM) N MEMORANDUM 

1. (Uf/IMIM?) This revised repmutt sisunmmiiees the remilts of our sped Ml stmd|y 
of manaagaraffilit conrtrrtte that ensnare conmjfdimm'ce with Seettiism 702 of the Foidign 
Intfedllggamee SimroaillaKice Act (FISA) Amendunsrtts Act of 200$ (FAA §7d3E3) and the 
Targeting and Minimisation Proceduress as&ahuttdd with the 20111 Certtiifffi&iaons. It 
reflects champs made based upturn adcdittimakl infcffliniaimin prawtidlitti sufosfigicaatit to the 
rekstse of the origpmiil repattt on 8 NovemUaer 20122. The repentt docuramaitEs our 
analysis, findings, and recommamdidtiosis for impmwaTim0.t. It aha® notes othen: ansae 
that meniitt aUttantoran. 


2.. (^// ireaiO)) In acccsrafemee with NSAfOSE Policy 1-6(01, NSA//(mS Office cffflw 
iTiqpm-ttoDrOIanisrkx l , and IG- 1 135®- 12 , Follow-up Procedumsffior OIO Rqprntt 
RemmnmridaSimxs, acdMWES on OIG reoomninmshatiQns axe smJijpint to momitorngg and 
follow-uip uotiil camgifetiikin. Conraffifltreli|ly, we ask that you ptamiitts a written repantt 
conmmhgg each OPEM rcceirammaialdution in the fotlowinrgg cincwnsstaness: wham your 
aafiiaan plain has been fuffiy irnpknnnmtfcdd or has changed or if the reconnmnmltiation is no 
longer vaiidi. The repoatt should! piawiitte saiffiitiimtt infonmftiaxan to show that conmtiree 
adfiisms haste been conngdktdd. If a planned! aettiiam will not be conifitetted by the target 
date. pleatse state the reaami for the d etoy and give a revised conqjdMiom date. Repoitts 
stoffluitd be sent t®j| iFofcjw-Up Program Manragjrr, at e-mail DL 

D l_FolksmavP (ALIAS)) DII. 


! 


3, (U|'(‘f(itj®)fG)-We appreciate the countte^y and coopeoatthMin extended to our 
staff tfamigghput the spaadMI stodgy. For adflitimakl in fanmaiawi, please cont 


]o» 9§3= 1422tf$ or waa ejnjiil itt[ 


ijautt 


Mn.(vi 


(b)(6) 

(b)(3)-P.L. 86-36 


• « • 



DR. GEORGE ELLARD 
Inspector Genaardl 
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(U) This intentiaxraatilly left blannlfc. 
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Tor m //Nor germ 


(U)) EXECWJTTTlAffi SUMiW 


(U)) Oven/iis/w 


•f fPS/ ^ SI/ ^F -)- The Nfatiomil Secaittjy Agency)' Genteel Secmrriyy Seuviibee 
(MSAJCSSSJ} conduct &s actfwitiees umtor the arotttotritijty of Section 7022 of the 
Foreign Intelligence Siflitellissnaee Act ®ff 197$ AmendhmBSitias Act of 200$ 

(FAA §7<QEJ)f a toy source (rfinffoirndtonn on foreign taunts. Since FAA’s 
inceptioni, (repo rting based on FAA §702! colldfli cmn has grown from an 
averqEge of l I reports per mondk to mone than I I FAA §702 repassfffes as® 1 
sowBBftl from «®0tettttc«i obtaihrdd with the assstaanee of 


! 


U.S.. com mamicaflixanKi senwiaee pnBvideis.: Ifee l||Ujorilfy of the fcillleeliflio 
ii (Mi IffifefcM.lt Sfflsvies Jroyidfds Jj$R|S|S(l mS tfht 


rdiifeaaak-r ftekaafaft^v amd up&ftsaffla I ntemtftt traffic) is f bttinaald jfarom 
) [ the tetetittat fcte4tfe#B.e, 


f-PJL. 86-36 


(U }/ j FOUOj For the? Agency to retteain thaiss important toadl in support! of its 
m ms ion, it must ensurne compliance with FAA §702. NSAfOJS has 
implhmEWtffdcl policies and control prexcedLirees, inefludiiigg training,, access 
conttalj, mailt pi &e 1 eveEscrffrcvidww, and oversight. This system of conttaols is 
desi^gmdt to pcwMitfe reassmafellde asairaancee of compliance with tie? sfetttUCe 
and FAA §702 tangptthgg and minim zzaibon procedure® s that form the basis for 
the affidavits mate by the? MSA Directtnr coiacaammgg the Agenesis u«r of the 
anittiwitrtv. 


(Uf f FOUO)) T he findinggs repBBsantt impnttweuiBjnts needbdl to the overall 1 
control emtMwmeent in wfaiklh the FAA §702 amttitxriiiyy is used. In a later 
review, the Office of the Inspector Genenatl will condmutt complliknree and 
smfettetitis’e testing!, to draw' condtasianss on the efficacy ®ff the manuggmEotit 
conttrdis. 


mm 


(b)(3)-P.L. 86-36 





(U» Highllggttfcs 


(Uf jfRfflliS)) Although the OIG did not ideutifij/y aressss of nmveompjibHiEK-e with the 
twitting and minhmtetoian proceduress, we idtatifiBidd six areas in wfalcflu conttmls 
over compliance with FAA §702 shaulHl be isnproaedd: 

* (U/ / F OUQ) AsaegsrraTtt of perfenmarnDEe agpimfetODmpipIrifflBcetartalailte'ds 

EsMIiiifahigg accountiablliljty for compliiaiaee reap!ices clear perfonmaance 
stenhmdds, meaisireamntit of acted l perfaMimanaee agaimstt thasee stonrifardds, 
reptantiiigg resmlts, and impfemeartaatin n of comaetitiee aetdism. Thesse 
processes are not fuller detehpcdrt. 


tom" m&smmmeF qrn 

iiii 
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TOP SBPRCt>ftil//NlW- OK N 


. .1 iBEQjJ j£* I IjfchlioJ l 

PI U4VUt/W<WIIP- 


1 





{bM3fS® USC 3024© 


* (tOf/SHWNIl Dissemihnattam fpcaeess 

A review ofFAA §702 -sobubbsII sariializeodl disseamnatitinn doc* not indludie 
steps to wmfiy thatt, wham MCTs we® used! to supposed: whatt is being 
disfsaninaterdd, the mmiiijple commumcatiimss trarrsaittcim (MCT) 
docaaireait&titin n required! was piepEaeekl in acamrafancee with the 
mimimizatibaii proaadliiess, 

• <U//F0y0) Docuimrteirt&tii^ 

Some intemrail Stannatedd Operattiigg Proceduress ancdl other internal 
FAA §7® guidantee hawe not beam keptt up to daifee and reqpiree 
reongpniiaaitian by suttajpott aowsis intenmial MSA web pajgi&i. 


-1 (u/TOb ^ r 



(b^$HPdL.8663&6 comps liaufKtee, and prodauttion of eorapliaatfe* aleutfes. 


• (U// E9UO) Tnaihrihtg iiflri^teaaidcfeafrfiDD®t® 0 ratnt 

AdjudfcntxDrs (persannsel respamiftble flaarapppraptin^g targeting reepesSt®! do 
not hma? a documnianttdd, stenittasdtfeiedd version of ttreijr taairihgg for 
reffeuaaiaee. In addlittum to the initial FAA §702 toaninsg required! befiawee 
aeeemiigg FAA date}, amal^stts ana? now required! to tate a new FAA §702 
applicattams course? on compliant tangptring requests and tanggaingg 
maiinit&naftDe.e, Howewet, the requirementd: for the appttuifttdxmHS coumsee is 
not yet eaffaDeeld, 

(U) Managsm&Tbt ActSism 

(Uy) rOUO) Sigmaiks InMll^nee Direcfcsnatfee patatmnael agreed with the Inqsaottor 
Genenaal rmommarriddoions, and the pUanmidi actfeMKs meet the intemtt. of the 
rec«MimEMdd&d]®sis. 
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TOr mmmmme? orm 


I. m INTII®(Dlini«OTIOM 


(U1 Bactegraundd 



3} P-.L §§y& 


(U) Soumcosss of Section 702 Foreign IntelI IgpnceeS&itw® latere: ^<Ac(F (£f§ A) 

AmetirattmBrrtts Act of 2008 ((FAA §702) contention §§=§§ 

(TSMffilfffllTJ) FAA §702! date is compos®!! of Digjtai) NfeftWQfclnMU^itee 


(DNI) and Dialed Mu miter Recognition (DNR) <$adttu DNI is Signals 
Intelligeouee ((SEIMT!)) reoBdhedd froan Inttermef Service Providers (ISPs) with the? 
asms&m ce of ting? Fedenadi B itireaam tff-Mi^Mitigation (FBI) jftihe PRISM program!) 

{’iHpsteami collecitom). 


J DNR faff# is SIGrlNT 


Analysts sattmklMtiirg | 


nsdswafk,: 





v&a Rfflgf&pcept eHE| tiiipn©B#- 

NSAJias the..aanHdaori fey to acquire conm mmi&citm&s to, firami„ or,, 
the case? of DNI daUtotkkfii fromn^ | aboaitt tasted selectors. 


(U) FRteapuni re mentis of FAA §7112 

(§/<£MF ) The tamgat of coUectSomi must be a nomljUSS. personn (USP) wk® is 
reasonatolbly believaditoo be located ouMiifee the United! States and! posaasssses, is 
expected! to rrosavee, and/or is libel!y to(comm eniicate foreign irnteHijgfmee 
jj- ^ ““[ FAA §702 Ceittfirradtiims; 


mn 

W(3)-P.L. 8B636 
(b)(3)!-®® lilSC ®W(i) 


(fl p / p/ N F ) FAA §702 reajaiiBSS tha? Attorney Gemma!! to adbptt tamgpltngg and 
minrinrimtiwin procedures s in su|pfp«iitt of tine stattute. The fcaigptiBgg and 
miimmizzatiiflsm praxnedUree s aia? docramm.tedd in each CerttilraHition. DIRNSA’s 
affidawiitt flan' each cectiiltrcatoonpijotwid 1 d es infonmnatidann regaitlngg how the? 
Govemnnieeitt will impkmsntt those? pro ced mass and states; ttat: 



)(3)-P.L.aiMaS 
»)(3)-50 USe 302 


TOP aBBBBWSl//NOr <M*N 
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• ReasoarabMe praKEffdlutees ana? in plana? to ensoure than acapikiitoann vumollasr 
the? Cerdificattion is limited:! to fangpirhgg nonorllfiSRs reasonatobly belkwil 
to bo located! outtadte tins? United! Stattes. 

• Tan^ttngg procedures s aira? reassanablyly designed to prewmtt the? 
intBrnttwinhl acapikstfcwin of domastiec conuminiaatitiosi s . 2 

• Acquirsitimn is for the? pungnsse of obteahingg foreign intteelligemuae 
infonratardwn witWin the? scope? of each CeatffTbaldtinn. 

• NISA will ffdllow sqeetffific miimimmtrdtfin praemlifficss. 

• NISA maty pitwide tins* Centteal Intelil%Hicee Ajegonyy (CIA) and the FBI 
umniiiimniHedd commmmicariimns acqjuiiredcl thntnugfh thiiss amttkxritiyy. 

(U) Independent imeasuin® of compliamBs pmfformaaioee 

(S///TPf$) The Agenm^ss compliamsi? with FAA §702 is stsdtopnt to bi-tfuamlil^y 
leww %■ the? Depanttneeitit of Jhssiteee (DOJI) and the Office of the? Director of 
Nlationall IlntelligeniHBe ((9HNMV[, win® raww dissEtmhatibrms, quemess ofU.S.. 
peisom identifiers ,s, compUrnisee inodants, and the? tangptimgg recpnastss for all 
new and reteHedd sdbittnrs for the? pemiidl as wel as the? smjjpDrtMgg 
infommtkbmn for a sampite of the seletasmss . These? emttitims haw® repaateekl a 
very smalll riwmlierr of errors . 

(U» Objecttvee and Scope of Review/ 


(U/ JBHMG&f The? objsrtiwe off the? OIG review was to assess the? adeqjuuiayy of 
mamaggmeriiit conttrols to ensnree reawniafeide compliiaiaee with FAA §7(®2. This 
analt^siss was basesdl on irarav of pitMkfisdd and drafltt guikdbniee and certain 
confflrdks in systtenss SMjjgmthhgg appUffirttonn of the? amttismtiyy . We alsa» 
intesmiawedd manragprES and amailysdts reruns Slide for tamgptthgg. apprxwuhj, and 
overs%)ftt snBqipKJlt to FAA §702 reqfaifeamntsts. Testingg of the? conttrols 
identified! wrffilbb e the? siritopatt of a latter rwitew. 

(U)) StaimUarctts of Interned I ContnJI 


(U) We assaessedd mamBgpmtrtfLt contrails agaimr-dt the Govenraceaitt 
AccoiMiabSiiljty Office 'Stmritaxtls ffmlhthmvckl (Qmttxdl in the Fedemtil 
Govemmmttt. Nlovemlear 199®, which presentfcs the? five staurftadds thatt define? 
the? minriinmnn levdl of quailt$y acsegtfcfoble for mairngganeinitit conttrol in 
goveraniEailLt : Control Envinemniimbt, Risk Assesanmitt, Conttrdl Activities*, 
InfonmKrttaxmn and Commanicatitions, and Monitariiigg. 

(U) Internal! 1 contrail, or mam^paiHsitit conttrol, compriEESs the? planets, mettadks. 
and piascedamss used! to meet missionss, goals, and objeerttraes, It praraifess 


" (0/ ^' 1 .( 1 ) NF iDamleatic fflaiJ*«QAtton£,..ataiocding itoSBieritton 22af the FAA §702 Minimtzaltoon ftocadtae®. are all 
commiuBiiGatic»TSSGttH®rr than fM^taroriiTiuiiteatboBS. irmi^ctjHg^hitJs^toiiv^lDtelitKiteesfiunctfan- and all! intandtetl recipients 
are reatasmd% LliiliB\^ l^.ttdta«eldi liriltbdiitrtitstlSStHteat the itimeofacquisitikm.. FfaiBi®«cooimuntealid)nBienuBt.si 
have at least one communicanl outBitifctHeltefecL! States. 
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reaesmaMde asmmaanee thaff an enfiii^ r is effecttkee and efficiemlt in its 
opeiaticoiss ieliatbte in its regxnnttngg, andl compliant wit&a laws and 
regalia towns. N1SA/OSS Policy 7/33, Managers' WeraaJ Control Program, 

14 Febraiayy 2012, advises thatt evaluatiraiiKS of intenail comttnd comsjSfcrr the? 
requuikanwEtets oudliiBEtl by tha- GAO sflaanHisdds. Tte Office of tte Inspeaatar 
GemanAl (OIG) evaluates managgtmmtt cosatoli againstt tte stoitllffidds. 

(U)) Targgttmg and MiniimiEsettion ProogqtUrBBs: Basis for CompIlBmjee 


y '• 

(b)(3)-P.L866-36 


(U) Targeting 

(ajlf/ i gl//NF ) Tte tangptting pracedennass spasriffy thatt NSA will mate a 
deteEtmhatitimi abort “whettftear a peisoon is a non-United States perssm 
reaassmabtyly betevedltcto be outbaiite tte Unitedl States in light of tha? totoUtyy of 
tte circ mmsteamess basted on tte information.! avadltblkle with respect to than 



J With re^pascK to th® foreign intedlljgeinee 


puEjpJKee tor the tangpttngg, the proaradluegs require? NSA to assays "whetflleer tte 
ttarget possesses and//or is lik$%teo comanumicate foreign inteWigemwe 

inimmiaBiiomi Jt.eamemihg a foreign power or foreigm temitcmyy.” WitDn respsrtt 

to docisimtmtteffffin\ ^anjalystts wte reqaestt talking will docunmait t in tte 
tasking!; daMha.ee a citatimn or citattMBKs to tte informattion that led ttema to 
reatsmabbly befewe thatt a targeted p-easCM is located! outaftfe tte Unitedi 
Stated'” as well as “identfffy tte foreign piowgri J aboutt wfaklh 


ttey expert to obtain foreign intellligjpaniee inrfbnmatrnm pursamitt to tte 
pi«spxo®dd taiigpUTUgaf. ” 


TS/frfP) The suBamittedl tangpttngg reo mEestt, is therm smftject to an adjjuflteaiioan 
revfew by spgaiiAHy taaihagd pter$aameH| 


ftW* 

(b))P)HP.U -.886386 



(6//01//NF) Obligation to review target status Once collection begins, 
analysts are responsible for conducting “post-targeting analysis to detect 
those occasions when a person who when targeted was reasonably believed 
to be located outside the United States has since entered the United States, 
and,..enable NSA to take steps to prevent the intentional acquisition of any 
communication as to which the sender and all intended recipients are 
known at the time of acquisition to be located in the United States, or the 
intentional targeting of a person who is inside the United States,” per the 
targeting procedures. NSA’s Guidance to Analysts on Obligation to Reuieiu 
Data Under...the FISA Amendments Act (OTR Guidance), states that, after 
taskin g, “analysts are required to verify the foreignne ss and nature of the 
target | I The OTR Guidance 

states that the targeting analyst must perform initial target verification 
within five business days of first receipt of data, verifying that the: 


* Usen of tte selector is tlhe intemttdd foreign inteMguraee tangptt, 


<b)K(H)> 

(b)PP D .LL.8863S6 
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TOr SECMIITl^B'tftjCW CURN 


• Taught remsahss apprapriatte umdlair the? Certtiifeatibmi citedl in tasHihgg, 
ami 

• Tamptt remains outfatlfce the United Statess and// or there? is no 
i rafomim tiaxuin to indicate that the target is iraiilbe the Unitedl Scates, 


-(S/i^ffjFBhe Onr@t iimg Target: Review sectfan of the? OTR GuMaiiee stetess 
that annaiijsaSs musd h o gpHtrii 


that titase has beetm no ehaaigee in the tang^etfe statues that womilttl requite 
adjuasttneotit to maikftrim MSA’s coenjlikncee. At least every 30 days... the 
revtew sfawtlttl confirm that the:: 


mn 

(&)PMPLU«%63|6 


* Sefecttar remains afflumiaidd with the intemtkekl taigsett, 

* Taught remaiiiss appropriate e to the Ceittiifctti®aaiicitethd. 

* Tamgett remains oufeitib? the Uniteil Statess and// or there? is no 
inffomnaaiamn to inanimate that the tauijgetr is instefe the Uniteil Stattes, ami 

* Type of date being obtained is not rontineily of a type that is sohpott to 
immmmiHa&e desttatttettn reqmtemmbas (i.e.,.domasltic comramumiahtim^s). 


{S/lfirO) Infonmtetdnn that demamsfiitees a chaigpe in any of these? faettsss 
might reapiree de tasking the sdtentor, desttreying or othfrewiiee haoutlihgg 
collectedd ttaffffic in accxaidlamee with thee miiriimmW&ian procedures s, ami notfcee 
to the Agency's awsersaaars 


(U) ©msight and reporting 

(U/// mniW The Agency’ mumt: 

* Traiinii those* tamrgfttrigg ami those? apgrrmrngg tangpaiigg or accesshgg 
FAA §70® iintfaimatliiam; 

* Ensure? that FAA §70® raw tetfffir is stored:! only in aatttexffiiedd 
rcpasiitonics ami is aeeassibljde omtty to thassr who haw hai the prosper! 
training; ; and 

* Cond®Ktt spofcdfaekks of taigptiiigg dceisiiinss, intelllgpaKtee 
dissemimatioms, and quentes of date rcpassttekis's for comptiiamee, 

(U) FKHnimiizattion 

(U lj /MRILQ))) The mhaiiniitedtoaii procedarexs are deagpeeki to protent USP 
infommatoan dumhgg aexpikittotm. processiiigg, retteitiixtui, ami dissemination n of 
irfomoHtihwBii obteheeld by teng^aimgg nom-USPs reasanafclbly beliewd! tto be 
located:! ontteitte thee Uniteil Stattes. They require? that the Agency' ensuree that: 

* Acquriisiirdnn is condUct told in a mamaren desiigpedd, to the greatestt extemlt 
feasaHlte„t<&o minimize? tha? acqpisstisbon of information not relevant to the 
authomitedi pvttgonsee of the acapiKttidxraii; 

* Persajomel... exencri kse reassmahlde judgjnnenlt in detenmiiraigg whedtear 
intfomnmtion aeqjuiredri must be mintimizedd and...destroy iimiUaalfcnliyly 
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acafluredd comrmunMatitinsis of or comaerniwg; a USP at the earliest 
practicable poirntt in the processing cytdfee [unfesss the data can be 
retbtihffidd undear except! ton ptswiisaanss dettaltekl in the mimiiriiaiation 
proesdlueg'Js]; and 

* Repontt($) basadi on connmuicaatinas of or concernimg a USP may be 
dissssmiiiaiddd... if the idemltity of the USP is deleted and a gemasiir temm 
or symnltoil is satetirotadd so thatt the informaftfcbron cannot reaKonabl^y be 
conmBHtfceld with an idenrtiffatolde USP.. Otiteawiiee. disbandnaatimi of 
intfedlligmnee report&s basadl on commnniicatikwiD of or comasmimgg a USP 
may be made to ® irecipietflt reqpihhgg the identity of such peman only 
for the penfliMmEfflinee of official dmtiiess but omllf if meetiimg [certfeahji] 
enterm. 


(U)) Contmoll Environment 


(U) RSdiiamce on manuall c®ntemlls 

(U j'/SSlltS)) A signafEkautit nnadfear of the procedhre&s and corettalis esteBUibhdd 
to ensure comjptiimiree with FAA §702 and NISA's coinnttappprasdd targeting 
and migMhttei procedures s are mamiMJ. Thuss. traihingg, sugoeffOTssnyy 
iwiimss. and oversii^ktt are critadl elements* * of the conttrdl struottnee. 
Modificjtiihnas to the systems relfedl on for tangptiisgg, cellaattomai. and 
piocessiaagg conttikuee to: 


• Imgarwe the aMli$y to pungp? infoimditwni when leqpiixeld, 

• Identify and prevent instearaees of over-coUectferp, and 

• ImpnaMff etffiica^y and efficiency crff processsraigg and oversight. 


(U/ /FOUO) (Realigmiment of resporiGBibilifiy 

(U) SID has resttructdimdd openatiemas to better mamagfe FAA §702 proosssiragg 
and comfiiBnttee. 



MIMIIMItlllMMIM H,.^. 



{bH 3 )-PJ_.affie ®6 


(Uj/FOUMBj) S2 Miisfsomi and ComfUianee perfisumss fumednms 
sngpnrtiingg use of the aattfcmliyy, as wel as additional).] oversight of 
FAA §702 processsaigg and comndlaaBi ce (SV conttiimuegs to utarffammi much 
of the dke nt tversrsighlt W-r^ngeting.) | 

_asgubtedd rcsgtOBSjftiijty fr<9m_S^:fe»-:- 7 
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0 Execution! of pungpss related! to FAA §702 incidentfcs (remmnKtii 
from data. repssittxnag s of recoctfe inellrgiMfc fftrr reteittam umfar 
tte amttiaciitft);!. 

o ImplemantJitidron of a puimg? adjiadidaticmi proces&s to better 
ensairee compfeteiesss of pumps;, 

o DevelopinmitLt of processes s and! tools to entenioee comgsliHHaee 
wMb reduoihgg tte buidtem on anrdtyrtts, 

o Tramingg and overnight of tangpliiigg adjjiidlbatetis's , anti 

o Prepateritoon of addfitimsa II mannagpiranilit measurees, intdlivHnigg 
mcttidss, te inpw accountabbility. 

(U) Continued process improvement 

(TQ//)D i tZ//f?fFJ 7 ) The Agency has undbattddeon sewnail reroewss off MSA systems 
andl piocessses, as well as tte date acqpireeld from commamdatitinns prwiitess 
and othcir Agency soraness mater FAA §702 aotthtritiyy, in response to 
comfliiammE incikteitts and quedidnss raisedl by the Foreign Intelligent 
Sumtellfaanaee Count (FISC)- Thesee r«itmss and ottetr effortts to improve 
compliance and efficknuyyofif openatioms haw resultfedd in sewnall chamgpss to 
tte proiffiSBEes and conttrrifcs smgogrolimgg the Agemay/ss usa? of the atethwFilfty. 

—(8//HF} ! SID continuitys to taste steps to improve FAA §702 compliance., 




(hH3)'-Pl..?&36 


. ■ 

.y \, 


In addfiiihm to FAA §702 traiirihgg thatt focuses on legal reqmiiroiiiefltsts 
for use of the atetiiwilrfy, a n ew course, "FAA702 Praettba&l 
Application'svga.s released! f 



SID conBianiees to mate changpess to tte taugptngg todltto suppoctt 

epprance i»ef&a$e gffieigsey FiMtii^s RtaStogtd Butiwg; fte 

gevie^, p. §) - (bK3)FP.lL.8S63»6 

SID edMplitafed ite(~ 

M flftfcice §fffis ifl lf g^mg [jpe^iests. TfeFHM SUpififtHlt 
identiifted indtodWd a lack of steadfast ffiadd feedback to targg 
analysts ’for, tte reasons tantgettatg' requests failed approval 



insufficient Ea53t^P®ent repaotting of demiMl taiigai^g 



request?, and tte need too ihittreasse acute umteribility and comptliamno? for 
taqgpriigg. ComEeteiee acMtsns^, incDuidjng stenriharddized demidl reaaanss, 
tterifiitinfe of dehiril metai'es 

Jlw 


i marcagge 

weekly 




denials of targeting requeste by 24 percept, j 


J impnwadd 
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complamce with required! internal proceiurees for selectta®' 
maiiFgpmefmi ami redmcrodl the risk of incidents. 

(U)) PefiimitfabciBS 


(fePr#* u§§ Mm\- 


(b){^-P.L. 88'30 


Ar 


(U) Annoodl Contmttntiacm Evaluation (ACE): The Agency fe perifaninaancee 
management system basedl on established! inafikiithahl perfiammaonee 
objeutivees ami perf«mmona.ee elememts, 

A djtifefatorsi fes'onn^ r-- ;-. | -(b)( 3 )>P.I„ 86 * 3 ® 

[ I with res pouaibi'lbitMyf drarv e <wranikmg ami appiwiiigg FAA §702? 


targe tm 
fr 


target in 


wttl 


e rr 


] 


/ 


wftidh pmawddes authmdkattdnn attdmiiuiaes ani accesss contrail samiusss to 
enteximee prognamss ami projectlss. 


{TO/i?’ Biff ffP - ) Digital Netwcodk InMU®«nee (DNI): S1G1NT detrinarti Aram 
. | eommmrtirgid^ imvolvihag My rne tt-fcaaede d -sefeflttrss 1 

QflF)) Dialed! Number Recogtriitpu (DNR): Co Ufdtfiomi pracesss □ 


^ jB//flay/ 


tpm 

Jfroi 


foEE telegdiKB^j' systeams. 


(U) Foreiigmiess: Assessmmtit ani docnmentititinn snqjfpiHttngg the 
detenrmimttmn of reasomdcble bellM that a famgflt is not a UnstBdl Statess 
persasm ani is outtadte the Unitei StatBsss. 

I 1 A corpasoatte compfatnce too l! that senates as a 

stetamlhsed accesss control ratetahismism,. \\ I Jchedtes that 

i mil nidi uadte meet the necesssasy ihlkssinn, tstakning ami cleaaamee reqjiireekl 
for: initial I accounlt access t@ SIGENTT toofe ani dafiattesss. 





(Uf ft WOtUO) H&tfter PRJtge LiSt (MOT)): MSA’s cemtodl recsudl of S1GHNT 
colfarttion, hMlipclmg teetu dds deniraed frtmm that collcctiihm ., which MSA has 
punjgrfl. The list indmfess ) ~ltha.tr have been 

mantel! for ptn^pe or harse beam pra^pil from | 

j) P systems that me usedl in sotutrdngg tnaffiir fm SKrMT rqjrottBgg, 


top ,hd mmmmmmm 

7 















































DQCm.: 427313EB3 


top MiMmini'war 


■ (TC/Z/lQi^lIP)^ Multiple CommamicatiwKiiss Transaction (MCT): Traffic 
contenmgg mon® than one disraatee communmaafttimi. This tcafffir migfa.tr 
conttoam dismniee commaunicariiair&s thatt as® not to,, fromm, or abound: tasked! 
sdteittors, Upstam collectiiimi mightt conttnm botJhi disnede and! MCT 
traffiir andl cotuiiiil includbe MCTs of non -taimgitedd indireiidluials that conttam a 
tasked! sefetttnrr. 


.L 


>UKJ / / lEOEP'lU Q 4 1 -= = ==! I A rMtaba se rapasjitwyy that: prawiibss 
., 86-36 Mtiietnal Off|poate®ft. It is a taw SIGINT 

. ■■'■■■■■>«* „ If 


sttem^e and! 


SIGINT sttffiost^e 





Sfti TBPSIGWT* 


MSA’s primary storage, search. andl rettJif&xail 

-.. ; - £: .— ' | ft i§ a m 


1 ^ 3 ^ 11-886386 
{hpjMBB USC 3024((iJ 


SIGINT stoMHgge system 

(SS//jSHfi0f ) PRISM: PRISM refers to the portion oftHteH5&& 702 collectm 
architecton® vvHtteeeini Addirddalale etaptronico ttnnummican service provikfas 
. PffiVkte|H^rnet 


(b)PH>lL.8K386 


fe(3):p.L 


V 


86-36 



(U) Pumge: The on-dtemanid mmawadi off data items. reaxlbrnhigg ttom 
UEtuaffliveeahJrie dtnsngPi stmitedd misskani data access; mecflnanMara.s. 


ftUlff OU-Q)f 



(U I f FOUOli Raw SUMS!: Any SIGINT acapured eitftmr as a resuilt of 
scaatrih andl devdopwemt or as; ta^tedd colkctiom operations s against a 

toptt hiffos? ftor iataftaiwiP has be<g» evatotatsd for 

foreign intdl^earg- and! mimniieeld in accxmskmnee with the ajigdiiiaMde set 

' Aeeeffifbllfd iftfeMiswn 




hDinn^Qineeitf sjsSstem which is tfinee andforiliatifiee data souBnoee for a givenn 
M^tighration m anned:! date elementt ami is govemedd in acexMcHa mee with 
£SS Policy t 

feads plarcnih gg andl aeqnigsttaxan efforts fo! 

Icollectibm of intellgpiaee. 


t 



A SID oraanizafttoon that 


(u U rmm ____J \ a sid 

inMiaiwe wiicose? objeettiwee was to redmosr taugptingg enraars, ttaefelyy 
impccwihgg piwxcss'ssingg efficiemny/ andl compliance for FAA §702 
tVantHsertiODns. 
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(bJPHP.lL.8S63®6 


(TC//pflM/jrfJWF 1 Upstuosam Collm ttoon: 
eo mimmi tt atiKMrss anrapnired from 


WSA's inllaa rcepttiigan of Internet 
located on tins? bimttedl 


Statted’ Internffitt "badfltoaroaF; conducted with tte assisttenee of electeoiicc 
commomicadons ssrofoee gnwtddta's wh® at®- located inatfe tte United 
-States ami haag beam seiregsdl with FAA ja7(ffl2 directives. This collection 
metH®dd| {is distiffigtekhdcl from otter 

FAA §702 DNI collection (PRISM),. 


j Tte tan^pltimgg toolltbir 


sttitknittfligg DNI and DNR farnggling compliant with FAA and otter SIGINT 
auttoarities. 


TOP SECRLWmm>rURX 
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II.. (IMRm&fr FIMD9NN3S5 RESOLXfflD DUFEIItUS THE REVIEW 


(U//FQtffi) lnc<ai n i npaH t i Ali1j*y betweem Assigjieeld Aiuthtotitles 1 
| land CompIlEamcee eoonyrffis for FAA §702 i 


fb)KS>-R..L. 86-36 


( S|D I Fy N F} CMe eflfi-the primssa^y NISA intetnail conttrrtl mectanimias that ensaree 
G&mpKaimee witfc FAA §702 Taojgitihgg Proeeatotrees is th@ adjjuittlieidtion of 
tangpttthgg reqmKstSs befonce tasMihgg, This icwihw condfimn&s that tbs' tanjptt and 
asfKaaiatdd scienter asa? tasted! unater the propaar FAA §702 CeEtitiicaioDii, ting* 
tansptt is not a USP, the tangptt is outtsadfee tine United States (foreign)).. andl the 
dctgmnimiatdlnxnn of reastmatolbie beBriT of foraiaHnnggjBs is piamarHy scinnCTfftdd. An 


&§M- 


[ 


(Uy/ JOUOh SV was awaKS* of titoiias gap between the NSA-requnired internal 
qontRpl asd ifflplefflgmMWin ef tfay miwaai eawtod wiifowi iter tssii. fls<d it 
was I 


-qmWtot'WiSSsH Rlslk of FAA §7®2 Nfoft-C&rfliplifeite# tori 


L. 


T%si:q<deSff|ffiP%>(5s 


r S 


J-l • I I I II™ 

m<pjl!*4k-3% 

I* iii in i. 


(9/fflSFj) T© supgwMt complliEancee witBn FAA §702, aiatximtttdd OTR mseikess th at 
a rgapite eti review of tamgat co mmmmicatttp ns is dug are ggimeatiatedl ) 

~~|andi sent to aMajjya§s,.j! ~| 



TOP miflPTTO^f i yiJJlAt 
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(U) This inteiticwnatilly left blamMv. 
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tr t i>p 8ECRET//anw(jOi? qirn 

III.. (U MFOUe t FlINDKMCaBS AND RECOMftJEMMTOTSS 

(U//FOtt0i) FINDING ONE: PerfomrearKDee Stainttadd?, 
PerfernmnaarKDee Mefcri'ass, and CompIliBamcee EnfoiraD©mGan1t 
Measures for TavpEttngg and Mininnrifeatoon ProcasatUiees 

Are Inaarnipifeafee 

(U MfOUQj accoimte&ili'ty/ for comptarnraB reqquiarescleair perform&rvBe 

standarate, rmeaat&awv&nbf actual perffemrarreeeag^ists^ s, 

reporting) r&swltesand impAmrtmtb&ltoa n of c o rrectrive aaxffcrari. These processes agree 
not fully dewetafpaad. 

(U)) Elements of an Effective Compllaance Oversight Program 


( ft/r/NF) NS A has estfatblishsdl a pre-tteskfaigg pew®ss that indtotdfess roikwss off 
targgtiiigg reqmKstfcs for corngdlHUiiee with thf tanggtiigg proccdLirees. The? 
tsaspttngg reajmKsit must be approwdl IMface tte selectors art? released! for . 
fl$H3)-P.Q. hsaiiirtgg and cdfitectiomt. j - | 

p i 

(U FOUQ) Effect! bee comgtUBmee oversaj^itt requires s the dewUopmeatt of 
measurable! e staandhnMs agaimstt which aettmdl penfommsmoee can be assssssdcl. 
Comparisswon of perfaxitmamee against these? sttandLa-rids must be repaarted 
regularly to mamHgpmmtit for timed iy review and follow-up astton. To getter, 
these" elemaaitts ptrawidfee the means* to esttdiilidii aeccoanttbbility and inMatee 
aettiiam to improve compliatmee. 

(U)) Shairasotl ResponsiUciGt^y for OversSgJttt 


(S///It|HT Monitainigg compliance? with FAA §7(0)2 tangpitogg anril mmiimiitzattsOTi 
prooradliies's ha® becxonnB? a shamed! resgwiiaMiilityty wittomn the Agency:. Befoia? 

201®, STO SV had primary resnHnai hhHvtv for moratarrinst tins? Agetncyte _ 

apipHicatoan of FAA §702 arnttfeerxit^t. 


(W , 2 . 


(S//|Nff) As peistmiiael outfesitee SV amumat l moeg of tha? re^panssibiillity for 


adjjadiaaiatiigg FAA §702 taagpithigg reqttnsNlSs, 


traipied new adjudicators's 
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T OP SEClRCTrfW/NOr OHM 


m 

(lb)(3hP.L 86-3$ 


and! assumedrl oversight of the taagpitiogg quenee. Statfethbss on tire tangpttngg 
queuee prosidbe an assssssneotit of tire timeloBsss of tire adjadlualkion prsxrasss 
and tihe mearnts to evalsitftte tbs? a deqinauw of the nmariten - of adj|udicatt*res g iven 
tire volume of tan%ytfin.g reqpfff sttAf I 


- --- 

of tire ovetaUl piwcesssiigg of tamgptingg requneSts, 
they do not provide quaili&ffltuee infornmatiomn regstndihgg tire acxnuraeyv of taught 
requitestts satknitttdd ami appmradl ami compliamnee with tire tangppetfngg 
pmaKEasdiiiegii. 

(b)P)PP.L. 86 - 3 $ 

(U \ /FOU^ty SV’s condinuing overnight of amailyst amdl adjadlicatear 
perfonnanee is effected thmsugfti reviews of tajgpltrigg reqena^ss (see FindSmg 
Three), panrttxippiabxin in bi-maaitbhily overbear reviews. ami maqrAgennoearlJt of 
FAA §702 imridenlt reptnthagg. Erroiss ideratiified in tan^ptttig g iequestfis are 
commmreaatdd to tire anBdijsftf, adjjudirattnT, ami | j l After overssar 60- 

day reviews, SV prepatms feedfoac&k bireffiii^gs tdm infann adjadltrafttas of 
overesarr findiiii£g>s. The biiMmgs also pmswiiite metimass on the reassanss for 
demaidl of tangpiingg reqoueeass, tremdfcs idenrdf&dd imnSW^s revidw, and guidanm* 
on FAA §702 tangptthgg proeeiLtrees. Incidentt reperaate are atom analyzed to 
idemttify treudks that might reqpiree attain. SV’’s oversight provifes a critical 
assessment t of compliamae with FAA §702 indepaairi&eiit of those? reqaBsStmgg 
taagfltihgg. Those feedhaokk, howemr, is not provided it® the manoagipess 
respoosabite for the tjangptthigg aoai^stts and adjmdioatdjrs'.s. 


(U)) DevetopnGrrtt of FAA §702 CompliERroee Metninss 


(b)P)-P.L. 86-36 


(U/ ^FQUO) S2 Compliance & FISA Ssbiff | | ipirtuvit^fes SMfae o9.tbtxt£5s for 

FAA §702 piawreswigg an d comp>liaitime: inchidling weeM)y report s on the 
. tamgpttngg rgroggt qu mire 1 | 

| ( The process* to establish complete stfeanilailds and 

meamires for assessmeentit of compliance contantes. 


(U J' / FQUO i) To si^ppsiat effectaffi momiteriiig; of tire Agency'is use of FAA §702 
autti(Daritr(y , meBmitss must be:: 


• Based on clear and comsiisteitit expeetteafdwms of perfiammaiaee for all 
fcagspttngg analysts and adjudioaStoms within the Agency and 


ffiti) TOUQ if 


{b)(3)-P.L. 86-36 

ZZ) 


top sEenEmmmemm 
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* Ge narrate sanffifciiaitt detail ttoffiadilifflste aettamm by the adpadicaMor or 

tmmim ««*&**■ (bipy^LL. 8S--3® 


(U ) 1 FQ U Qtj | The developmaiit of thssssa? mettrabss by ijiife rntt asssoaitiddd 


with tha? C ompffiditmrw e Missaimi Compfaiice Prognam, a groiiqp of NSA 
iniitfeitive* to acttiesee reasBcnafclbde assnraaonee that tha? SIGUNT and Inforanattaxuin 


Assumanaee missinnss are? condauftdd in aetwaritBonee with tha? laws and po&iress 
that proatott USP pmaoy. Tha? prasgpasm inctuftes momitaingg and 
assessnnentsts. incfiidingg trenail artd^ssis. 


(U)) IncGurnplfeJfce Impltemnaailfetition of PrsxcassBBaBS to Ensum© Targeting 
Profits eantDiyy and Comipllianc© AccawiJtmtetttilftijty 

(Uy f IFOUO) In 201®, SID eftflipiplejtedl the ) ~l pra>jjextt, a Learn Sis Sigma 

piwjjawtt to redmoa* targeting eiTors and improve prater essiirgg efficiently and 
tStMo fcflfianc'e Ifor FAA transaatirions. The projarett team comprised! persaameti 

. * freml .I 

fb|i^ip]LV'»®3S 1 l Althoagfli mend of the 

reggsmmarid&tirans Tr6am | | haw? been fflifilenKBiiadd, wt<aimnBnctobdoais_ 
that focasseid on accountabbility for tanggtngg aedtut&by have ffiot: Ths?[ i 

sbm% reewJOTfttiddd for FAA attal&s&s; i_..-■ 


* Enmpifayjeee penffommaioee review (sbjyetipreesfdbr comuiiiaiiaee with tengsthgg 
r«pitent«tst;s; 

* PetriisHcc mettrabss to leadeoss in organimti®mss returnibhde for tangpettngg 
(origiinoaii foemss was on denriidi mettnibxs for FAA §702 tangpetihgg r©qpBssSS»; 
and 

* Prognass&iee meaauress to improve compliance with tatgpafisgg 
stamferrfcts, indhdinfflg renmmvfll of FAA §702 targeting andiorrtity. 

(b)P)fPLL. 86^3® 

(Uj' /FOUQ) Althottgth not addtessedd by tha? ) j &Nfydyl, sijiilhilar actiQnBs are? 
meedbedl to asms, momiittoT. and retanndiatef tha? qualify of targpttingg rwiawss 
condiiotedd by adjjindibatetoar.s. 


(Uf fFOUO) To meaaairee and inensaasge tarpttngg pra ffkiffliwv o Lttee work force, 

including tan^ttngg uundkstr FAA §702 autffinriliyv, SID r-i [has deveUagrald 

the Tangptihgg WorktistKiee Readiraasss Stamritedd (ffiRfesJrttCttOiaictionai Mb 
Q uaUffbatifeinn Stamrihrdd (JQ®!)) for all Ag^ity\ppersasnrnd'] invdkadl with 
tangpttoigg. Its pumgwsse is to esttdblidh the sfasnatard tangpttogg tasks along with 
the kmmvJtet|ge, skills, and aMUitees necessasyv to complete the tadfes at a 
deffitKKd presite iatayyldveel. 4 The sfcamribrdd is sagpurttidd by training and 
asse&snerttit plants {stanrtadd testis and on-ttteej<j>bb traihihgg evalauttoa&ts}. The 
WRS is mater revtew and not fully implkramOJdd. Assodbteeld developratmtt 


1 {U J HOUO ^Afdirotiaoaii! JQS defines the standard of perfoimamse far a broad SIGirWTT fCmBilaui. such as targeting 
or reporting, and crosses ski Hi communiMaa. wind roles, and personnel! itypes. It applies to cii*ililai«ss( i and contractors) 
as well as military personnel. The fimSisnal! JQS. once completed at the specified pmffcramyi l<kratl accomppumiees 
the indbiotball across PLs and SID. 
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plants and a meannss to tradfc pragnesss ana? being; created! within the Associate 
Direrttiratee for Eduscfattbm and Trahrihgg’s (MDETj) Entteaprisse Leanrihig 
Managpanmttt (ELM) arnrhiteettiree and! i nrIladfee mucDa of the reagaireelrt taaihingg 
(classroom and on-ttlsejqbb) for FAA §7(0122 tangpttingg autd^sSSs to adhuvee full 
praffimmicgy. ImptemDeaitaabnn of the? WRS and associated trsairihgg and 
assessments s will provide aa means to adhteee accxoantAbbility for compliant? 
with tangpttngg reqnuirememrfes and ensure training sttaauliauilikaudi®n and 
enftmcffiametit. Development of FAA §702 meflmbss based! on the WRS 
ptoffioutn^y stamihrdets wouiltlt snjppwHitl the perfiaBimmcce measureamntt 
comjpxmeentt of the WRS. 


(U/iFQ UQ) RECOMMENDATION 1 


(U// FOUO) Est&ttil&h for FAA §7(12 tteg$titiggaaatyfystanahd adjjuirii ted tears ACE 
perfcmmaroee ab|qetitmbaba6led on comupIblbMJin of a sfpsaafMdcl proffisanwy levell 
of theTTarg^ihggVWdflklmffi^F^desesStStelattiirdnalrELEILM tnaimrrag plan. 

- Pi ACTION:: j 


(U) rWtei®®ement Responses 

(U/ f -F QUO) AGREE SID ! fr ame pre pairing an ELM plan for 

tangptt anai^stfes and adjjadibaaidJiH'.s. The ELM plan will toe brdknn down into 
praffiaiBency levels, thenatijy allowimg the anallyst to register for the conraatt 
training as stated! in the ACE object!wee. The ELM jplan fortthe Targeting 

Workfo ngee Read&msss Staartfearrid for FAA §702 will be completed!_ 

I 1 —_,l| -ior. d:ll Nlahonall Crypttrihggcc ScBubodI (NCSj coubssss. EmtSmrqed 


L M-4« 


regtsttotihrin iit tte ELM progcami and tangpitiigg pralfikismcoyv St-atfcfcstics to the 
indikiiiLiafel level as welfaas eom,pleti(ona ra te of any regnifeeld F AA §702 


tcriirimg (MIS counsel} will be cdlnfihttdil 
the -job tiaihihgg will be phased in. 

(SpStlfttSft: ©PIN j_ 

iu) Tasgitt gimpietoh [ 


f 


StrlKtetred on- 




(U) OIG ComnrerTtt 


(Uyj WMKQ))} Plamnadi action sattEffes the intent of the recommaniMtinn. 


W'P simmmmamm 
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(u/h= oiuc 3 >]l RECOMMBHfimmKmj 2 


(UZ/F OUliQ)) Develop metrics and imnamagpTrwTtt rB^cpwotirtigg to: 

* {U/fFetJOJ' Measure t^g^iriiggasi®^^tawdcfedjiiJijalid^Qto<romfi^ptliia®ice 
witttn FAA §702 targetf'mgg amd mirrimiizzdildanpparoedidroeesa raah d 

* (U/JF OUQ)) Supparntt analysis of tireirateirtdttiaative of changes meeaHeaH 
tiraibrimcg or guinUsermce. 

(U/fFOttH®) CowroHrraJfeetltiis process with ttteG2»mprehensile® IWlBEBidwin 
CompHatrase IPtaagaainri. _ 

ACTION: j 


30 


(U) Management Respoirnse 


F) AGREE [ 


] its [flirt of tte 


SID Lean Sis Sigma Team. Paitiinpiaiitets wl assesss th£ feaaliilii^y otff 
deradbqqimigg mettmiiss to evalmmee de-ttaggtitigg tramtis amdl pcncsess 
defriimdee.s. Final implerntrattaAksn will depend! on tedhriieiil caputlillities 
and depUmpmaiit sdtetiildes. 

(U) States: OPEN ,_ 

(U) Tafiggir Comjikttcmn Date: [I | J 

(U) OIG Commeintt 

(U ) ^jE QtUOfr Planned:! acttiian satteffess tha? intend of tha? recummiEffBdddtio.il. 




3)-P.L. 86-36 


:3)-P..L. 86-3® 
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(U) This inteittomnlilly left blairik. 
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•in► 

II III III • ! 111111111111II11I I 


miK ■- 4 

(b)f3)T.L. 86-36 
fbWiC ItlC 3024(i) 


ZZ&EZllkllfi 


(SWHQ FJN D1ING .TW3D:: Certain FAA §702 Selecto B [ 


m 1 qjTTwJllll 


m 


ft Veriffaaflibon that AutHnatriraefcl Selectors Are on CollfflattaxDin 


ITSy/SI// 1 !^ 


{bW 

(b)(B)-P.L 86-36 
(bM3)h9fiUUSC 3024(D) 




■TF9////SE//J' NT) Tlw OIG’s Report ora the Assessment p/FManagermsertt Controls 
to ITm plenment the Protect America Act ffMA) Q,f20Q7 [ST-084MDQ )J, T/AfaEitil 




~mr 

j*)(3|)-P.L. 86-36 
{b)PHiO USe 3024(j)) 
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IKM8)-P.Lt 86-36 
(b)P)^ USC 3024|if 



. 86-36 


Ta i y mji’RiE msummoR -v- 
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(UM=©U©}) FINDING THREE: Oversight Requihamrositds of 
FAA §702 Tair^sttafnig ProcfflatUiess and NSA Polia^y Are Not 

Fullly AddhosEEBseelcI 

“TTSlflSWWfF^SV ov©rsi©tft of RAW §702-^sowc©d dissemmabiom has not bee/m 
mod/Mraati to address res^'reMraenisfor mutopfescommi^^^ tramsacdjknns. SV 
is implemrenbim® a new process for overs/j@/btt of audits of RAW §702 ddbtbbase 
queries. 

(U/f POU® f Oversiglhrtt of FAA §7(1112 Dissas mi nation 


The FAA §702 tanggftihgg pranadbiees assaicdiatdd with the 201111 
ceittfikat toons respifee that SV penflamn "poitfidicc spot c heclbs... ©f inteilljgenc e 

disseminations! s to ensuree compliaiiaee with estaMMtedrt pr(*£@dliress.* SV 

pcnfoamss spot chedlss of boffin seraftUzedd dissemination n amdl disaeminatatinn of 
evalnimteld aiiiaiinizedc! teffiir:. 

(IF-Sy 1 /SiIJ/fu^NF} FAA §702 mMriimkdismi pnoseaitiiess esMHlsfch unmiauiee 
reepireenentets that and^stfes must imptemmit. This incloiites the? refinement t 
that andesite docummitt sleeps taBam to wifyy that disanetfce commanicoatioas 
withninn colkationn conttamingg MCTs ana? eligSHteffiFr dis^aniiiafttmji. SV”s spott- 
chedfc of seniktliedd distffimihatitinn does not indhitie steps to verify that, whom 
MCTs were assail to sntpjxsitt what is being dissaaamhatddd, the MCT 
docuraiBaitttitinn required! was prspareekl in accondbainee with the mMmizzftitDtm 
praofiihrres. 



fe^36 
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(iJJ/fP«rt*€^iSQfiXWtlWlENDATION 4 


(TS/JSI/fNF)) AIMraugfrih not requiraaoti U^ytttee irrihiiiimatitiiorpipoBdudsar^s, SV 
shoudtti indlude in tttfoe spaftaiteekk of serialised oU&seinhiatithsis of FAA§j7lB2~ 
soiuKoascti imeftterai I ppsooeeldtes s to evaluate aural’ coaip|ifoe e witflfn title 
docuirre^tiitionra^is|i»raeni8sit|9efteitaigmg to disssmiinatiiaim tteeBsed oomdiSeiCBtete 
connm ummiitipsiswwithii n MCTs. The sgattebhelek shmltd also evaluate profpar 
use eft 


per INISAundiliyy. 


(U//fB 8 H^ ACTON: SV 


(U) Managemnsrrtt HfesftsxDiBse 

-It//MB AGREE | | 

| | to mafiffy ttihf mettiuslOldggy and proaasBS 

for spott-ofteekking disseaminatoirss of FAA §702-sourced! fiiaterJad. 

(U) Stattiss: OPEN _ 

(U) Target Complktiom Date: 

(U) OIG Cotnrrnerrtt 

(U j ) Closaree of tMiss rtmsimrnsuddtitiii® n will be evaloiatteld uporn recengett 

of docomiimTiaatiD n siiqjpurtimgg tte actliasni tatem. 


P.L. 86-36 


(U)) Oversigfttt of Targeting Deciigaams 


(fl^/pon?) FAA §7®2 taigpttiigg proeedknms requfca? that SV “conduct ongmrjg 
overa^ht acttikiilies and mate any ne®asssia®yy repoartss,, incBudingg ttosee rdkiriugg 
to incMaartSs of nomnximpMaaoffe [with tte FAA §702 tampttngg 
proocsdlues s]... and ensure? thatt neasssafflyy coitTeetike? actions aro tateai to 
addinsss any idartiffteldcldftfiiaarieses.” SV achieves oversgjht of tauptingg 
decisions thraigjh sewnaeil moans: 



(bK3))-P.L. 86-36 



(bP)4P.L. ffi6*3® 
(b)pkS 03 D USC 3024 (i) 




TQg srerer m'simommx 
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implemented] its own process* for nramaimtitiiigg sefartorrs. These? ass? also 
adjudicated by SV.) 

SV mpfewss gtfiyfe tofo it I (hi B)-P. L. 86-1$ 

semriihm tftmm to the overaaea'ES bi-mecedtil l 



1 


SV evaknattss the targetihgg reqraasat for ineopssEiteneiiesi or inaccurajcies 


and might! review the so rooms citedl to sunpport forei&jnrsess if SV 

questions infotnmattoxian^^^^^^ 


i_ fca 



A ful ramswf, indluHhgg sosaxtess suuqnrtitrigg foreiigjmeesys, is condutctedd 
for all tamgatngg requressts selected for review fey DQjj'QD N X. 

Sv$tp«'fimgg doeiwnfttforticton was mfewodlfftri'l fefttte 

tamggttthgg requests smflamitted for a recemtt revtiasw penuxfl. 


(3/ / HF) Togettearr, these? prmassses give SV a. p 
.FAA §701! taigqttingg and adjadi cal toon procsssees 



ettibre on the qualittw of the 




.otr 


§ m 


(Ilf ('■F QU€H An asaeasnerfflit of comjpliamrce? with the tangplbugg procedairess, 
basscdl on SV’s lemewssoff tansgstring reqaiestte, is not repaaitedd to maniffigement 
Suclh repawtingg woulkil aM in idealifficatti»n of trends, asoailAstss and 
adjjmdiaatoos's whose? penfanttnsaanee demomstratas's a need! for addJttimafel 
torihingg, and awdioiiritittitK'e guidance? in neeil of impntovemeirtt. 


(iU/gpeU€4 RECOMMENDATION 5 


H^anhboElirbali^lypipcndGiedenaTragaegisenferetnaQssiSsmnaentent oftati&tngg 
analyst aamld adjumlibsdtor perfrarnraroee aspainst the ltepaiaadc|b<platycy 
requhamrantes for FAA §702 Iterating based on SV review® of tangattrngg 
requests. CooiraHrredfee vwitthi FAA §7(112 metrics rep<nrtthgg (fcsee 
RecoinnMniismtfedild)Oin2^). 

tU//ftWet ACTION:: SV 


(U) fWten^ement Respomsae 


t 


// /FOUQ ) j AGREE Per the reapiiremerates of Recoirumteididtimi 2,j 
l»iltl mcKttp orate mettaiics for mannatspnreflEte's asssssineBtit. 

tu) mm-, ©pin ■ j_; 

(U) Tanget Con^tetixan Daife: | : : ’ ;; f|&Pj- F P,b. 

(U) OIG CmrrrnHTtt 

(U ) /F&llXOT Planned! actiom sartsffess tUne intent oftihe refi®nnn£eddhOto.n. 
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(UJ Oveirsigjttt of FAA §702 Raw Trafffoc Repositartess 


(U ) jfFOUO)) Tha? FAA §7®2 tan§ptiiigg procsdhrees for th® 20HU ctetiifdahtimais 
reqjiiree than SV condinmt periodic? spm&etfoekks of qmaikss agaiumat repasssittfries 
conffianiiirgg unDSVKdluMMtdd ami umnrihiiinniizedd FAA §702 ttafficc. All qurafess of 
daMimees conttahiigg ra w SIGINT content ai® swilljptttt to daiilly nsuimw by 
annilitrrKS assigned! to each taingplinigg amdlysSJt. Undeir U.S.. Signalks Inteiligpmaec* 
Directme? {HISSIDj) CR 161® , Sedtiian A2.9 , andiitires must be tuafthieekl in 
accondtauee with SV stanittndds or meet with SV for a hieffhgg on atndiitnT 
resgnrnstiilitliew's beffoiee comiaifltinigg aimiites, USSDD Cffi 161© allso reapitEtss tha® 
SV condunatt "snpaar auafiifcS" of all intemtitiee raw SIGIIOTT dattatimse systems. 

(U j' / FOUO)) IM$y atdfites of quemess assesss compfibniee with FAA §702 qucuy 
reqpainsamorsts. Overcagjltt of tb® audits is msBassssuayy to ensoree tha® tha?y ar® 
pisspaarly and consistency executfceld. Howewn;, such redkwss am? not 
penffiranEdd with regaiinitiyy, SV has piloted and will soon fully implement* a 
na?w sutpmr audiit procasss tha® will examinee tha? juiKtiffoadtioas for qucmnss and 
evaluHtte qusa^y tenants for foreigpmeess using* varikams Agency dattribssees. 


(U/lFQfe®^ RECOMMENDATION 6 


(U/ lFQlflQ)) lln|^tte e anrtttltbsiapqagaigliti|lrpces9Ssidrpt<pvTriade periodic feedback 
to FAA §702 aidittsngsaand their im m EB q panenlt ocmtHee opadl% of audit 
performance.. 

(U//F€miACTIOlNl: SV 


(U) Managamaitt Bte^jarrese 

(U^/ fH£l(Dg>) AGREE SID j' SV has fully impfemBrctndd the supar audit 
processs for FAA 702.. SID request t>s closaree of tha? recommOTddfcitMui. 

(U) Stattiis: OPEN 

(U) OKS Comment 

(U / ffiHSULtSH Closaree of ttmiss recusimnmddtitM® n will be evaluated upon recaqjtt 
of docwnBaitidtinn stutfltflioltmgg tha? actfumn talfcam. 


m sECHEmmmmm' \ 
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TOP SECRlBTi/flTOtyOi? OURIHI 


(U//// FQHJKg fr ) FIINEHrMS FOUR: Some Docuim©ritfeaibon Supptotrtthnig 
Use of FAA §7(02 Auttoirtjy Has Not Beenn Kept Up-tahQMfee 
and Reqwihass Reoirgjaarizaaitiicm Acirjhhb NSA Web Pages 

tU MFOUffl Guidance supportk)® comptomti: use of FAA §7Q&autftnmtyyis 
m&mtt'n^i'ms3t&eMb\lfa<atitioBisand is not fully orga/mrasd by subject Some of the 
guidance is outdated. Two Standard Operad/hngg l^oaed^m&s(S{QB^s)orpv<icl^6e 
diff&rimg gotfiatemrseon the a^J^D^tOTpproeess.SOPs for some oversijg/lrtt 
funciwrams haareenot bee/m deuces! bgqs®d. 

(U)) Maiimtenanpg of FAA §702 Guiidanae 


(U ) /LRiiULQQ} Part of tte fumrrtiom of NSA's SOP* and otter forms of guidanree 
on FAA 702 is to instruct ama%st£s and adjnutiiKfttwrs in tte prapnr use? of 
FAA §7(012 auatknrity .. Inchuftdl in tte guMaroee ms sucln topfess as targeting, 
II J dis^miiaation, incident* regsawttgg, and tte re^pitemfewnis 

for appnMail of FAA §7(GE2 targefliiigg reqorests. 

|$(3}-P.L. 88-36 

(li// !j . F.0QXK5) }) T heaee instt nctibons aia? foumdl in sewnail plaaess, inelidJhgg tte 
FAA, S¥,; Slid | | web pages, tte SV SharefRniitLt sites, and web pages 

maaiattoinadd by indfeiifttabl S2 product l lines. It is unadkatr wtetttear some* of 
tte guidaucee is curnsntt becaosee it refenss on%’ to PAA, tte piffidfeecesssar to 
FAA. In adriEtthm, much ofttire irfommfttom on tte FAA web page is 
proeseaitedd as tips or appeanss in ulcthhi ram d mum form,, mdhiijg it unndteaT 
whettlhar it carafes tte same? deguase <rf autttoofitijy as tte SOPs. 



(U/7- FOUO) Tte FAA web page, whtefii s tealth be tte primnmiyy sommce of _ 

(6)(i£j^rpt, 86-36 jtut&init&atly t- guMamcas; is owned by tte[ 

1 | §!©'% PAA plafthiag-&>_' 

upibtee tte guidanxee on tlais site?, but other pram hiss, sudh as suqpipxaitt for 
tte 20111 FAA §702 CeittHbadtinn rancewdls, respired! atttenthxian. 

(U)) Targsttfrgg Review:: Two SOPs 


Two SOPs that provide guidance for adjudication of FAA 
uests have been issued ..SV. r.e..ared..the 
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TOr SEBJtEOflCTHC l Df CDIHI I 


K® 


§•■ Itf 


K Ww&St; fe -gflP RWfeM te l I lias IWs iffifl Mfafid 


In 

ilities 

for tangptthgg analyses, releassrBS, and adjjadltraitobai's revikwiffig FAA §702 
tergptihgg actikiticss but doe* not provide a deflailtetl desaiiptioon of the review 
jreqiaimm^ Btsts. Respjnsfliliityty for taaaiiihgg adjnuflira&Dars mom resiites in 

whiktti staulUl esdatblish the amtteaatittatQ'e gui daunts? to support that 


regnmre«B| 

tBBfthiiigg. 


(U)) SOPs for Oversight AcUjuittees 


(U \ SOPs aw? key elememte of a system of maiiBigpsimmt conttrdis. 

They esfebllsih perfommamee expecEtmitbrnns neffirsKsnyy to acttieave coipaatodse 
objectives, indlatHing (w»mplaimce with estiabiisfehdd authorities. 

(U} /IM)XIL(D))) The Agenar^ss us? of FAA §7(322 amtti®®itiyy is sdtojpatt to moniitniiagg 
by SV, S2 Missiom Suppnlt Steffi, and Agency peuKHinatl who oversee 
tercgpttngg analysts (indoitiugg adpfficatora)s). As noted! already, guidance for 
taGgptihgg analysts and! adjndicatora's has been devefogreld by SV and S2 
Missusm Suppontt Steffi". It is impoitdatt for tte overs g|ltt fumrttbms to tews? 
docuurteiutdcl prwtedLuees to ensuree consifientLt execmriani of these funutiimss 
despite sflaff tDanaxrerr. 


NNNNN NNN 


Mfi) 

(b)(3)-P.L. 86 

i use mm) 


.j}6 


(J8jr/ NF) RespmssbHitities for FAA §702 oversight tew changed 1 aigriffbasiti^iy 
in tin? past year. SV performs re®iaews that support assassm mtit of _ 


eompj^ance wi 


icom 1 nance wi f e 


tors. 


a* tfe a " d 

j___| supports 60-day reviews or targ 

dlssemmmtdffin by BOU/ODNI, and manages insMimit repostt inmslgpitifln and 
follow -up. As per^ranaH outeiitte SV haw? aexcaglteld resipoiaSillityty for review 
and appmwd 1 of a sigitriiSirautir poittinn of tte tacgpctinigg reqmestSs (umcludfrrgg 
adjaddioftlcH S acwssss tte Agency}}, tte FAA Impilemaarttofekiin Team has 
assumed:! respcmitsibiillii^d'fifflr trai 
mointtaiigg tte tacsgaingg pwsessss 


mn rre and ove rsight of adjjttffitxa&bcars and 
ss. |_ Tinas impIkmBrttddd tte puutgr 


(U)) 


adjadibatitenn pwwssss to improve tte comgsEaferaess and accuum^y of punggss of 
FAA §702 date. SOPs for these? oversigtktt fumutiimss halve mot been fullly 

{bM3)HF.LL.8S6386 

Role of ttfn® Rules Wlanagenrmaaitt Process 


(b)PHP.lL586366 


(U J' ffldUlG^t As part of MSA's Comwiedfensisiffe M issaiaan Compliifnaee Program, 
tte role of the 0 GOiOOC fr h s to gatiimr | orgaaisee. 

mauittaiinj amd provide access to tte inf orate torn conte heekl in extemniil 
aradfaritites, NSAfCSSS polity,, and compliiaiaee stannafenhs whkfln govern NS A 
missism acttiMsiss: . The FAA §702 guidance steal til be maantt»iasdd withaim tins 
framBewfirkk. 
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TOUT SC < RRfjgMMtSI//NOr ORM 


, 86*36 


(U/fF©y©^ RECOMMENDATION 7 


(U// FOILH0))' In acconotl wiitnttteeFRildes!\Atoag§BTBi9ti1frferaB\eOTls,rfest©fetEEtalffih a 
process to maimfefim a^H®dt^^egigdtDta»ceupp)pportir^ compliant executibom 
ofFAA §702 auto rity: 

• (U/ jrOlMS t ) Organic thee infoirmatxgnn to faoilltote ressaacbhbby topic, 

* (Wimmfr CoorroHrraJfce ottenggesiringgidaterece with requiraaH thsarriing, 

and 86-36 

> (U/ f F OiLDO)) Establish sb 93hg^9S©0Passtrtteeggid£iain®e for adjudicattion of 
all FAA ^QO^ttog^tfiimg requests. 

(U// rOUO)) ACTION:: | 


(U) Managermentt Rfte^pasisee 

AGREE Thffi follo wimqg actimiitess at® 1 in pias^Esss: 

are devdksgihgg and! updlatiigg a simgjte SOP for 


oversight, adUjlidimAtoan, amdl taigptfiigg FAA §7022 fumitionis and! 



tm- 


%WZ7, 


docunmaitafttiD n into a mro&tflOYv 
wbkketl withAtlfej - 
wa*" .' and progress ' 

Wife 


popMssg 

In. Ob.to .bet 2012,. SIB jL) | 
~h> di8@te§s Aft 


tfer H g§ FAA" 


jorate 

aio^ | j FAA* web paftss? 

Guidansee changes that requitee updates t® MCS eoureass (wiAiiti 
tee e$$8K w ill be re<pBs!<tdd via a Mew Learning Solutions, 

sucBti gi^eQ |;l twill b® th® origioBtcwr ujxwnt coordimrtMon with 
$V:. In addition,;|i ] (see RecomM*3ndd&tinn 1) will matnegp? 


In 


thhipnges to the? Taigjpatthgg Workffismse Readimaesss Stardfeardd amdl ELM 

train!®® plain, 

(U) Statius: OPEN 


(U) Taingftt Comgfetcorcn Dated 

(U) OIG Comnnnentt 

(U ) Planaredl aettihan sati&fess tte intenat of the re<OTtnimeiridd4iffi.ii. 


tqj p gccwc7i[yjiiy$ , Niwy B W f 
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tUP SBCffEi^a i ^wr OOT i 


(U) TM& p<$g3? inteitiawuaHlly left blSrflK ■ 


re >p secrc msivKorof &r 

28 




DOCm: 4273H3S3 


(IMPOHSW FINDING FIVE: InoiasasB^ Autsnvmfaboin of 
ProoassBBBass Suppeittiinig FAA §702 Is Needteod to Ensim© 
CompIliEBicee and Redy©© Erranss 


(SS i ffi&IW E ty Fflhe process for purge adjudfcafiism and executAam re#t® so© mam®l\ 
procedures that mig/lntt result in inconTypfefe and u ntArnielJy processing. Eligibly 
for access to FWi §702 raw traffic dafladceases/ssnot ve rffiaafl after user ac counts 
are estefe/Fs/teti. Notices supportra® required rB®w®w| [are not 

automated. 


(Up PurdHtg of FAA §7(93 Ree<fttfe3 


)flPLL866366 

'tSftmae 362 4W) 


(Uj'/mmiDI The Agency identifies s communimatinns that must be remDaweatl 
from i its systems by maMirjg a detenminardtinn that contend! does not meet ttna? 
stannikrdds for reteithkin. SueBn recondte ane ingliMiMe as sooaitroess for A£tencv 
reports and must therefore, be removed 
| repor| As.,these rTpoUds llw ItletnfiTied, 1 tnejy at® »dci 
MPLt ffhi'S! system contains items that hayeiheen or.are being evaluated 
purge gk^analysts Vefflon j ^ thai as^jarimary source for repenting 



P.L. 86-S6 


JoF 

ft 


(b){3)-P.L.i6%6 


prewndt intpropsa.'. use Qtfprai^dl recxundfcs, al.me c® ids sotteded to® repcoutL-are 
Checke d agaimtt the MPL,' iii feaJL linn®, stoheBi at repemtt i's rate assail The |U ' 

| t ang M[SfJi6ltisible for deleting; recocdfes from iheirr system based on an 
Execrate ©(toder,. fe'hdtt'h is an araifewitktitb'e request to reamnee date. (rom'tfing [D | 
| | CompBatemess eLtflUse MPL as a y gaster of recxradfes pungpril and full 

rCTmrwvdl of recfflcdls from tfi® | f ame critical to conijjslIiaKiee. 

(U \ /I FOUO) FAA §702 recaag fc that antfe ass identttify far punge arc soiiijpmt to 
adjradlicatlMan by peranmfljdL ml I The raw provides asssurarate thatt 

recordte subject Kpnpurge are? completed fyiddenttiified.. It also avoiite punning 
recomfe eligitetef&rr rettaarti imi becaai Bse tltaa?y wena? colteatteld umdkiu autfhjuritif* 

. in adcidiitio ti to ,F,AA f?.Q5b: 1 l als.o> f.owfUiMtteffil 

| te tfee pWSge 0ife J 


I 


U| , /~F I QUQ) The adjraflbaatetm process is mamualljy intemiye - 

b rentsonnct.lssissue tihff execrate orater to 

rfeow-up wifowft m^rnk 




eiror, j 


The maninaal praxccsss is smhjfexftt to 


complete 1 tte purgp? creates 


J Lack off aeffltamrttonn to 

opportunity tor incasmogifctee or uratnnrfjy 


top seem: tmwmwmnv 
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TOP SECROIISft t ^Egr O ftW 


ijbtftt.. Ui 


processing. \ 


(U ) /FOUCbh No insteamms of inaipjpropiriate repasntihgg weie idenrttffied during 
tftmiss review whfcfti did not inetartee tesSthgg. 

(U//F0U0) RECOMMENDATION 8 

(U//FOUO) lireEnosfflfflSB awtoartefeM 
processes to suppmtt connplfet 

in of the [lurg^aldjddBlklro i® rabdxeKatiatii o n 
te avnlcti tiiwlyl ^>®oei4ioti o n. 

(UZ/FOdti^t ACTION: l 

{U)R 

(Ul/TOUOJ AGREE SID ouflU 
requuirementts for auttmrariban 
sdradhtte of work,, and impleu 
the dettalteki response (. 

(Uj) Status: OPEN 

(U) Tangett CompIkttbm Date: | 

(U ) ^ F QXJibO) Planned! aettiiam s 

/lanage merit Btespowrese (b)p)MF i 

liiBetl a threat pjhhssdd appooadii to dew lop 
to impnwee parade pnarasss effidraiiyy, plan a 
meant the new capaBaiiitess {S@fiAppendiiK CCfdor 

1 P 

(U) OIG Commentt 

atisfiess the internet of ths? rec«wiiimeeiridtitw.n. 


86-36 


(WKF&SBtf) Accesses Controls over FAA §702 Raw Traffic Datadt&BSBSS 




■lP.LL«^5§6 


(b)P)HP.lL.886366 


(g/fflfl?) The FAA §702 tangStiigg pracradhices assactalidd with the? 20111 
ceirbifcRi©ciHs reafluiree that SV estottiiEtoh ptwasssss to enmiiT that raw laffafE'ic is 
accasssMde only to titaese who haw had the? propaar trainiiiing. Raw traffic 
demksdl ffami FAA §702 collectfcMn is maMttamadd inj | 

Te §fctai& a wm- a^wift aM a m®* tofe 

a^aigiwklto an spihovedirmissicm r lo bfcam ttos 

I l acpess reg^ib,^d jjfrflaf daftfebasy l t aarf fate 


l 


gumortl tra.in.agi. Whem. affl ef re<pm 


panmltfcs estoWistimeiit of an acomntt 

a missaam n@@dl to access tha? infommakkni 



snaviDimfflit, 
m WtBfflt&A fttt 

ft at US 0 EOSB l\ave 


m prooMSffis ensuress 

uimllaiKttoiid thff resHriotiaxmas for 


hanittingg the daltft, and hma? been pfftsgEeaily trained;! in FAA §702 


l«t»)( 3 )*P,IL 86-36 


dtees I</t u 


1 


(U _ 

after accounts haw been estiablSdhed. 

■ accessangg FAA §f.<92 raw traffic dataltases confliin iee to meett e Jifialhiitv criteria. 
1 [cam be ussdl to wnr% this informfttOTiri; | j begam using 


afe train ing o(r access HHIHfitHSlation 

| ddsess not verify thaff persaaass 


to> sucre r/mm«$FQiM i 
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TOP SECREThSf/mor OIUJ 


[ J faf fife# -- - fl fer li ..Jfe fflg iwt fessff 


.,/ 


}-P4- 8M6 


#fe OUO) [ 


ss autthurizati^oi aUttotiHltes and! aeeesss contool 
setoicefeces to NISA enterprise psogpaniss andl piojjaaitEs. NSApCSHS Policy 6-311, 
Aulhgjnt$ss#©n m& Atrthefteahon Str-v/te#§ m WshN&t 26 Juity 

^ 23JQL 0. EetiliitfeeS thatt alLNgady data. reflsssjttxiriraes anril appl ieattnms be 

\ tatbrdih| tb 


emabitetl 



policy, a S^tsitiem is 

when it uuj&izes adMBui^is about! the? user,: ekbrtainedfrfrom 
applies aattfoxcltattonn detisi(siolHs basedl on thoNS? atttrilntatttes:’’ 

Usags- Guirfe states? that; "auttivorizattian ■ is basadi on ptriwifeges tecM-s-wd'h-ad 
^secmritjy cleanancees. taahiiigg coyiqp fete dl |_ j ) 


(U| f /I fOUO)) Faihree towerify us*ftr attGrabiiMes thatt quaUffy for raw SIGINT 
access? inensEases the risfe of ina^p-rxjpiatete access? to FAA §7(023 raw tr<dffir 
databases 1 !, althoungjh no such inappropriatete access? was identtfiedd by the OIG 
dimiiyg this stind$y. 


:VUVJr"TT'n:nl:; 




(U/rF 0ftJOl) RECOMMBMMlli™ 9 


U/HF@a@rt Estab lish for repositorass of FAA ,£7 (52 data; 


a means to Mifjfy that iwsots remaim eeligBjtde for access. 

(( WTOUO) ACTION: 


tfL ft! 


IU ^-FO ^l AGREE T 


(U) Managememtt fftesjjoatrress 

Jmamagpss the magging; of accea^^onttools 


jto r riaositoiifes. Eligibility to access FAA §wP2 date 
is updated! M celecffiedl in £ 


_^aro able to reattibtt accesses acconiling to a uasafis eligibility 

Statluss. This con ttxdi was pre’wimu.biY hamfiled at a system level! but is now 
iffl&na|fcfll by[J ^SID requests 

closaree of the recummecnldiaCInn. 

(0|) Statuss: OPEN 

(U) OIG Oannimeiiit 

(Uj' fiUMO^ ) Closure? of thus recommEerridtabiien will to evateatdd upoun recaijftt 
of docummlMrion supporting the aettiism taton. 



Required Review© of FAA §702 Selecttxrss 


b , (jg/z/ntFl) Umktr FAA §7(012 auttorrity, amrilyate air retpiradd. before? tasfbirqg 

(d}(s)-P.L 86-36 dieters, t© fedMPbne that! fefee intendkd taught is a nofiuiISSF rga««n^bly 

|fepr-&b y§§ §924^ btdfemd to be outside the Umttedl States and! confinw thatt the petiaan is 

appnogiriate for tangpltrugg uimdlasr FAA CertificatfattES, After tasftiingis inittiiaeekl 
amdi collearttmi beghimes, line tao'ptingg pioceduness reqpiiree NSA to condmutt post- 
torpttiigg analysis “desqgiBfll to detect those? occasonss whem a person who 
whem targeted was rea,wnihbiy bdiswedd to be located outtssifte the United 
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TOP SECREimiH^JOram 

States has entered:! the Unfed! States, aodl will enattibe MSA tto flak®- steps t© 
prevent r the inttentionabl acapiKtitaxtan of amy conursunicatatinn as t© which the 
scmriter amdl affl intenfteld reeiptentSs a®? known at the time of acaguisstitoon to be 
located:! in the United! States, or the intenttbmhl tagptihgg of a person who is 
inditbe the United! States!'. * 

(S/(£)lfl fo To ensunee compliamre with the®? reajaiismg-fitKts, the Agency has 
implemented! the Obiigatcmn to Review (OTR) processs, which estidjlishhes 
stamterdds for post-ttesking rewwss. Initial tangpt verification mustt be 
completed witMm five days of reeaajpt of communicatatinEis for the tasted! 
sefecttnr. Analysts mustt comffiimm thatt: 

* The usee of the tasted! selector is the intontted foreign ihtdffiigeore 

t*Hpat, 

* The tangpett remains appropriate e undbar the Certtuffiesttfibaanccited in 
tanking; and! is not a KJJSP, and! 

* The tangprtt reimims outt-sibbe the Unfed! States or there? is n© 
inffommaitoffln to indiicate that): the tamgat is indite the United States. 

(S/Z/fin^ After the inMMl veiiffikEattemn, amall^stSs mustt revmsw ssnffikikntt 
iraffoinnmfemi to verify that no change? has occmrreekl in the tamgfltss staduts that 
wotdbl! affeetteJfe|jliiijty for te^atagg. MSA's imtaraMkl guMaim- directs than 
fbfcrjs review is fa be dome at least: every 30 dy ss. In adkdiirtum t© the 

refefw l . . . l &itftfllMSs Wfflfflfpme 

whettteai the collecttiimi obtaumdl is roatidaily of a type that might reqjmree 
prompt destfnutteom (e.g., domesticc comminiwatitinsls). § 

(l®# ! /01//NF) Autoinaiattibm n has beeim implennpamtafidl t© suppaattt compHaancee with 
the OTR mgnnBmannts.- 1 


is Mm /If b f 



5 (U4 ffOUO) Guidance toAnallraiB on Obligati arm to) Htaiaw Data Under Protect America Act and the FfSA 
Amendments Act (on the FAA web page). 
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TOP 3ECRCT//Sl//H0r ORN 


(biro 

(bM3)HP-L. 86-3® 
(biroSD USC 3024CD) 


-t O/jG I //W) Improve accaunltitobililf fair coraipdlaaioee wittHn NSA"s iirnttemall OTR 
requiirranrweitit: 


1:r 


■ ■' ■' ■ iTYiTiTJ i' 


m 

P)(3)-RI 
P)(3)-5P use m4(i) 


(U/ FOTOy ) 10 


■ E 


urn 


pE mt /NF1 


ACTIKEM: 

AGREE SID reports that tte requiremieetts f 


aie completed!, ! 

I I 


(U) Status: OPEN 

(U) Taiqgett Comgoletikani Date: | 


(U) OIG Conrnmnfflitt 

(U/ TFOffiJPj Plammadl actfiiaan satisfTies the intentt of the rec^nmmendatiisn. 


-P.L. 86-3® 


(K)(3)-P.L. 86-3® 
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top s Eemmmmp qmpji 


{U/NFOmfr FINDINGS SIX:: The FAA §702 CuriribuJilimm Needte to 
Be Updatfexti and title Training Requin®ireantt Enfumsstl 


(U M P QMOft Afthougfo the new FAA f 7(02 course significaMty rmprowed tramm® 
content, addiitidme'l subjects should be considered, and the tnta'miyga should be 
enforced. An on/ine resource supporting adjud/icatorr is needed. 

(U» Analystt Trainrirrag 


(U) SID hass^ttfiSaalli^l^pmqDjed'etdatmtriging for FAA §702 


{'6H#-P.LC86$6 


PEJ/ /MOPS ) ) } All peisnnmaH with access to FAA §7®2 raw tnatflir databases s 
must talk® the tranihgg conmsee "FISA AmendnsisitLts Act (FAA)) SectJiusm 702” 
((QW5C1 2035 } > which pwwiiltes stmdfeants with an unndbi'sfianLlriigig of the legal 
polixibss and mMmimtMon pwKCcdlrrees for tM* amttfrxrilify. 



stand tardds andl processes for SIGINT teGgptfhgg ami cieatfhgg tratmirgg and 
compalfcmyy assBssssmmtt mectemisms to smpijoaatt ttesee steaiiUmalds. “FAA702 
Pracrf baiI AppIlicaCionss’' will piraiwidfee a tool to imptryee anrdjyst umdbrBtaadrhgig 
of h®iw to apply FAA §702. incliidingg clear examqjites of docaamBiiaation that 
meetfs tte legal! andl policy requiirBarueritds, andl exeicii®«s in tte use* of the 
pranrijplesL. Topics covcnectt in the? trahingg indkdte taugpingg reqaibsmeotsts, 
scfector resjanahh. dooianmtultitinn reapireelrt to suppaaitt tin®: tangptting dccitsdni, 
appraMaal of taugptriigg reqHKstSs, aeailptt oblgatiomn to revfew eommuniaatdbnas 
to veiiifiy thatt sctectorres cornDiiiiice to meett tangpihgg reqaireaneoCts, and incMnitt 
resaardii and rcgMitiagg. 


(U/ /FOUO) “FAA 702 Practicall Afliqliiatitioa'fe’daihses not addrasfficeeHtain topics 
innpsntftrrtt to complianKBS \MitthFtW§§002 

(T9^//SD/j , NfF) "FAA702 Pradibail Applicatnians" focusess on tas^pihgg and 
tangptt maiarttoaaDc.e. Certain mattonss wet® not indhidfeeld in the scope of tte 
counsee, indladiiigg haarilling of incMaitSs resMiltunsg farm impxopBrr 
miminizMioon, disssmihafitian hamdilinfg, and sill® tasttingg. Based! on 
imferraieewss with SID perscamcel and OIG review of th® coumsse?, otter maffitess 
staullil be coiKsidenedl for addiiiimi to tte coumsse: 


* Explanatisjon of tte reastmabble belief sttantliiacdd, 

* Repflffltihgg Jiiincliafliigg tte n®w procedures s reapiredd for hanndiling 
MCTs), 

• Qusmy reqaiiaBaiieotds, and 

• Procedhrees for shaihjg FAA §702 -demweedl information! within tte 
Agency and disseamiiatitigig FAA §702 -dcnikecH iMforaiattian to 
custtonerss. 
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TOP SECRim/ffiflfflpP t ORN 


(U/ff©U9j °FAA 702 FRmdtjcal AppIliBeatomBS” is not enfanaasotl for tangpttiigg under 
FAA<pG82 auUhsarf^y 

(Uj'/UGM.®)} Accondlhgg to S2 officials, complktfom of "FAA702 Praariretil 
Apple attorn^" is reqpiireelcl for asodl^sSSs whs* haw access to datta deniMCst! froim 
FAA §7022 collection. The course offers more det&Ubdcl traiiingg in the 
apgdliEEti&jan of the autthmuyy and the potent tail to impsawee tangptingg efficiemuyy 
andl coingiliaiiiaH 1 with FAA §702., However,, the reopirerncnlit to take the 
coumsse will not be emflaarBs eH uintill ADET modifies-; the contertt to addussss 
defeieneness identified by ) | SID Openatirxnas persmnatl plan to tagjnn 

S 6 : 36 tfe ^ r^iaiteneaAt for all -analysts with ae«<s$as to FAA §702 

infoBMataikin I ^ S 


(U)) Ad judical ter Traitiirrag 


i>R 3 )-P.L. m 36 


) Adjudicates verify that targeting* rerpiesfc® meet FAA §702 
comjjiimmee starndtarlcts beffonee taskmgg. A siaflaifigaittt traaiiiiiiag effort was 


uudkotaMenn 1 


j Jfbut a sdanddfrirferidd online rests* 

ircee is neeifefdS to sujqpcsHtt cumantt 
e wouM ptwdifte the bask for 
tyy of tainihgg, ami same as a 

- Mfitt itliWirfe ^jtijsMicators. An online course 
performama? sttainiiatdds, stappiott conmttec 
reaadly reffeuaanee whenn questibnss Euritsee. 

(U/!F©U©P?E©^^ 11 

(U/fff©0©1 WWntiify the FRXm§§Tff2 cuimrauWiun 

• (U/dFeHO) Hrajkuide addttunhl tnainri 
impirammr mini rniz^iha p, d&issranirn atirti 
uninpes to FAA 

intorn^litop,afliddaarne9cpi^aa1^ron of 

• (u/yrouoi uifodhtte w faa 702 Practie 

reqiihenwrtt for all F^§§'ZB2asiatyl$t! 

referemmae. 

{U//F©tt0t ^Ol GJKU: 

i: 

gg on rmriebtetbis (e.g., firomm 
^jrppepingiitgqtoifriianltonts 
nrtsttsEihahaging of FAA §7®2-dterveeld 
the reasoimaddte foedi&fe&adari^d; 

all AppHbEdtomBfe” and enforce© tttee 
sts to comnqdhtte tttecoots®paadd 

u tiraiitirrgg antd mnaKe it avaiHaHdte for 

1 


(b)p)HP.lL.8©33®6 


36 




























DOCm: 4273 H 3 S 3 




8€ a 36 


(U) Management Response 


(tiff-Fe w AGREE 

OVSC12HB3: SV will wo* with ADET to update titae FAA §7(0® (OVSC11203} 
course to reflect the ameinlldl Tac^ttiigg and Minimisaikm Procedures® that! 
the Fottdign Intelligence Sumueeillance Court apprised! in Septtoniteer 2012!. 

| t will puiMMh tcaiiihgg sIMjss onto the S2 FAA §702 TaBgpEtihgg 

Review Gumfaisee weh page and work with ADET to updatfee OVgGQ203 |3 | 


CRSK 1304 &JL3S®:-- hfpdlfeates to'iE&ATQK Practkal! AppDicanijan^ ” 

It R58k 1300 4} hiMd “FAA702 Adj udfcattwr Traamhgg” (CRSK 1305} wei® 
e^phetfi l I la ad#ttfcm, iafenoadd regvsrMiomi ia 

ELM progoaam and tamgfttngg patrffidimcy sttatisii&ies to the indHkiilLuikl level as 
Wfdl a£s ttpmpletlDho ii rate of any maiip dl FAA §702 tdaijiing (NCS cdw ui^ses} 
wtlill be etmtpi^blete-tfl | ~| Structsmadl oiwtfed<jbb tfaiinngg will be 


phased! in; 

(U) Statius: OPENr 

(U) Taigat Bate! 



(U) OKS Comment 


(U ) / FQILM) ) Planned! aetfom sadidfess the intend of tha? recxfflomieeiiddn{MB.n. 


(U)) ConclUffldmn 


(U ) (^RSUiOl MSA has des^iedl a system of maniapmemt comttrdks, incloittlhig 
tramingg, policies;, processes, pnocedhrees, systems*, and overagjitt, to ensnree 
con^Hianuee with FAA §7®2. Our reefflomnsfioldEitiosis sci^gge-St ways to imfrewee 
the ovecdll conttrol environmiBritit in which the FAA §702 auathiariti^y is assail. 

(U) This mhw examined! the design of the controls.. Comgdianaee and 
.soAdiatitiee testing needbdl to draw comtlkissaMas s on the efficacy of the 
manoagfamrint contrails will Iteecoondmutedl in a latter revism;. 


t% ) ' p sccftE mawNfjFm® 1 ¥ 
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IV.. (U) OBSERVA1DKSM6S 


(UWSUflfr)- ProccdUreas to ImpHgwee Representations to the FISC 


(U /IPOXIMS*)! In an openattcmi as diven^e as MSA, where? a mwOMitidde of legacy 
systems are inrewtedi in pTOcasssigg and compHanree umdler a given antfiurilfyy, 
it is umateKSftaridlable that variation's mightt exist in systems and mammal 
pramfdtuess involwdi in tine appilicatiomi of arnttitmity under FAA §7(012. These? 
variatMims haw the potential to create com ytiangg cotMera ps wheta sftattdfadis 
are manrtfetfcdcl for all lis^rs of.an amtHlomity. ]_ | NS A expaaxttoi its 

inseeelffVeiificati'on of Accumc^y (VoAj) procedurees to MSA’s FAA 702 
Rffinimjiaatfebmii Proceduness and Affidavit. MSA’s VuApiocedhiees one to bo 
applIMl to written repneswitetti toms that drsnittee MSA's aeqiiiKstforan, 
prsKtasssing, retention, analysis, and disaamihatiltiDn and form the 1 basis* of a 
legril opimman, a FISC Order, or an Execultike Bramxh deodimi or autliamliyy, 
The pungmse of a ¥®A review is to increase? comffidhnaee that the 
repneesemteatMais made to extaraal entiiiiass are? acemrade and bassctl on a 
shared! untdbrstaadihgig amwg operatidnaal, technical, legal!, pfflttiijy. and 
compliiaiflee officials. The Vo A procedures recpiree all factuail sdatenmuts 
within the declarations to be veriffikdl. SuBqjecat doeonnBntds must be newikweekl 
by amtliwiaaigg indliroiillialds identififcdd by senainr leadtenss within the 
Directorates. 


(U ) f FOliOj i Additiunml ttraiiirihgg, maintenance? of clean: and updated! guidance? 
and conttimuedd implementt ation of the VoA procedunass willprovitte an 
increassail level of cofflfidteiaee im obSaihiiigg a consistent unrifemssaarirfigg of 
Agency processes and in the aeearacgy of repnessmtetitsiaia'is mad? regatrlimgg 
these. 1 processes to outlssdfee aiutHtnintess (see Mecommendhtioims 7 and 11). 


(UWOttflEtf Effect! 6rf 


130 gctwnaianiee wHHn FAA §702 
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TO P SECRCT/fSRRJtmr ORH 


(U/fitKBfflffit- Effect of Manmall Entity of Inflmrretfcbon on Tangetthgg Requesstfcs 


mv 

{bM 3 )HP.JL.afi 5 g ®6 

(bX3^Si USC 3024(i) 


(Sf/ptny) A sigEriffikantit reapiteffmetLt for pmsKEessssEigg tamgpstingg requmstSs u muter 
FAA §702 aBjtticoritJv is ths? docuDHtsuatitio n of sujpgraGtt for ans%$tfc& ’ 
detemrihaation tfaatt tha? tangptt is outtaito tins? United States and! is ng»t a PSP. 


- figif fXHIF)) Befonas the? tamggetim^g reqmastt is ap|pm«ck;l, adjmriiuaEDBS's revarm’ ths? 



TQf 
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TOP SC CRETFIDI/ff flgrOR W 1 


V. (U /limiBft SUMIMMIW OF RECOMMHNIMICDGISS 


(U//F©W% RECOMMENDATION 1 


(UI/ FQW) ) Establish for FAA §7®2tfear^titiggaaal^stanalr0ctljaidljaaltHi®to%eB\ipEr^»infQnttance 
obj^<irti^±)feaaicbooQDxip^!tletion of a spsaffijeld praffraeampy level! of the "iratipaiiigg 
WortfelfaroBB RteacHmess Stamfe^aaiddSlI^tbriarjingpgpIpfBn. 


-pNf}A§ff@N; I ■- 

(U) Status: OPEN 

(U) Target OawijriMteflii Data! [ 


(^JR>iL.aSB3g6 


{U//F©W©£ RECOMMENDATION 2 
(U#F6tttf9r Develop metrites and rmarBagpfiiseititreppdirtgig to:: 


• Measure targetfhgg arratyyfefeiadd adjjuiBHccaSibor coirnifldlarKtee wiitfh FAA§ME targatffngg 
and mininm^atomn pparoediuheEB a rati d 

* Suppantt analysis of tirerarite indibattvee of needed champs imttasriiirigg or guibtantJBS. 


(U//FOUOJ CootraUhtote this process width the (GsjrrpehbeBiswe^^ 
Progitarm. 


~ (3ffNF) ACTION: 

(U) Statue; 6 ?ft$i=Ni - 
(U) Target ©MfifpitetfSOT Date: 


] 


-W fr hHT Hfr* "Mr J " 
~T JTgTOB I m m n 


L.ageSSe 

Wd) 

ttJH3)-PlL. 86-36 

(Ui/ fOTO)) RECOMMENDATTKMI33 PH3)-S0 IWSC 3024# 


[U//mm ACTION: f 

(U) Itatua; SPIN 

(U) Target Gn*m|plMm Date: 


t 


f fc W FOUQ)) RECOMMENDATION 4 


- f PS//S I HNF - ) Alttttroj^ih not requiihsti by th© miimriirmatitiinDrpnatosideidserjes, SV shrnJbd indlidteitin 
tlhe sflBttebeelck of disserrinaiitjoas of FAA §702-saurceeitJ nrraa&eiafei IpparoedmtoBes to evaluate 
analptto’GE0np|ihaose wiitfh tlte atommeetetetirDnreqtdfi®nr©ntenfsetjbairtimgiing to dissenrintoitian 
based on diEBa rtoto ocmtimri a rcata lnsn s wiitfh m MCTs. The spot-ottraakk shmifcd als® ®A8ddiaMe 


pr^tr use 


per .NCSA Mjiity; 


(WlFOU&f ACTION:: SV Pf3)-P.L. 86*36 

(U) Status: OPEN ._ 

(U) Target Cwirpltetjcm Date: | | 

(U) OIG Omnrmrffirtt: CUtteEaureeo<6tttti^sresonrioiiaeimid^ wililIbe evaluated upon ne&Bfjdtraff 
documentation supporting the action ttofesn. 


TOP SECRE 7Fli$/Dfoi 
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Tor smRCTMiH ' cqr em 


(U/ /rOUO) RECOMMENDATION 5 

(U/fF OUQ tyFPfembdtijaftj , l prpvbrie cteianagaigiente ati assesseteitient of tairapttrrajg analf^t and 
adjiunUctotior pertormBmee agpjietethtihtediatjahd nd poiby reqiuiresrraanMs for FAA §7082 
tangpttngg based on SV reviews of taircptthgg recreates. CooiraHfratte width FAA §702 metrites 
repontthgg ($ssse IRe(sairnrimiv)ldtitior2)2). 

(U/^QUG|AOD2NU: SV 

U <**: I I 

(U/W=0UO) RECOMMENDATION 6 

(Wffi i Q U &j Imptenmsiitttlthe super audiit prdj®®30&a3ir3lcfD peroefed ecrakcodi©efetoeaafcba c k to FAA §702 

auditor bs and their managemrartt amtltibe qualify of audiit pertfamraricee. 

(U//F©H©))/?C(EniffiW: SV 

(U) State:: OPEN SIID/SV repourfetttessi^raaditipiprRQgssGS is fully implemented for FAATtM. 

(U) OIG Comment: Closure of this [recommendation willto® ©x^liateti upon meceiptl of 
documentation smppattrng the action taken. 


(U/ /rOUO)) (BBDOfMIMEINIIlMiniO N 7 

(U NFOUO) thncomuimutitian width the lf^feBsl\M0ia|§ffieBlnlfrtraeve(wlo,rlestst!)tifeHiisdnp9rqpEBSs&ss to 
maintain aiutttoiitEttteegigdatBDiece suppartiriigg comnqdlantt exeeujtfcam of FAA §702 auttarrtyy: 

* Orgaitnites Utrse i ntktonrmtadrho n to fad ill tote ressemebh by topbc, 

* CootraUhtote ottoigges in guinttarasB width reqiuihattittemirogi^nalnd 

* Establish a sahg^eSBSFPaastttheggiddiacee for adjjuidJbtoiban of all FyMX^H22taagr§hrtigig 
reqweste. 


]-"H -H—J. 



(U) Tatg^(Sarti)±^i<ton 



(UNF OUO)) (REfDOiMIMEiMDMTIIOIfJJ 8 


(U/fF OUKD)} ' I hpreaase auitornttiiqin of the pui^sB^ijMl(tiaja<t)h>nanKhdxeEetiotiqiirc|si 9 Ssesses to 
suppesntt comnqdtote arrcd tihnns% exeewtibm. 


ilWmm) ACDON: ...... 

U) Status: OPEN 

jU) 



(tep>EpLLS®«$6 


(lU'ftfn&yO) RECOMMENDATION 9 


fb)(3)rJML 86-36 


(U// FOUG) Esfetlttjfeh for repositories of FAA §7® dataJ 
means to veri%thlalitJSi®^Bere®rae1igpib^ible for access. 


la 

a 




(bjp»»u.8effi«6 


(U) State: OPEN Slfll>re$n0t4s ttinadtaaodatonss hraws bem taken to read to® to® narasminTW^ aadd 

requests its closure. 

(U) OIG Comment: Closure of this recommeraJtatftinn wllltesea^iljto^upawiuesteptt of 
documented supporting) tte action taken. 
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(U/fFOtiet RECOMMENDATION 10 

(U/ffFOfcWJjl) IhiproyeeascoonutatHbility for coirmpHraroee vwtilbH\IS&&’ siritetarala DCDIRRaopucjlerraemfcnt: 



(U//F©tJ©t MSHHOINt: 

(Uigfety#: ©PIN 

<y} "HiFiei eemp stien 


(^3)=P:t, 86.-36 


p -R.L. 86-36 
$StD use 3024{ii)) 


(U/FFOtie^-RECOMMENDATION 11 


(UI/FetiOtfMKfy the OTtirroddam: 

• (UI/F OUO) lindUdte addittionall training QtmiiiwtddatBts (e.g., imptoparr irrihiiiniaaiitiDn, 
dis®@firiiiBtiliM*i^),rffpprtirtDngeic^iene®ntotBni^que to FAA §7(32,, ogieffyyffqqitiweBrPBts, 
shairihrgg of FAA §702-<3tefTve£fcl i hf(ExonTrati <biio>,ranshaln stk pbepilsibitsti o n of the reasonable 
belief standandt; 

• (U//F©tf©D Update ‘"FAA702 Pnaatfeboil Applications" and anrffoceethtfeeaafuqiaraenent 
fur all FAA§§^aara*^Hs to compi fetes ttteaDDmee?iraahd 

• (JU/rtBi OUQ -) Documrenitttltibe adjoin# bait® r tirairrin| 0 aaddrata*e it availlatolte ffonrrBtffeeeinee. 

I- 





] 
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top SEfflaegy/.'isr/zMOF qqn 


VL (U) ABBREWATRBNBS AND ORGANE^ffllUXNBS 


(U) ADET 
(U) CDW 
(9/gffl ft CIA 
(U) DIKJNSA 
(8//jfflfp<WJ i, | DN1 
ff WrF > DNR 


(U) DOJ! 

(U) ELM 
(U) FAA 
(U) FBI 
(U) FISA 
(U) FISC 
(U) ISP 

PEgy/aWiT) mct 

(U) MPL 

(U) NCS 

(S/QIR) | NlTOC 

(U) ODNl 

(U) ODO(C 

(U) OGC 

(U) OIG 

(U) OTR 

(U) PAA 

.~ 


Assamiate Directtiraaie for Edoikmtam andl Trailing; 

CorpaaEftte Data Wardksmee 

Centeal Intelligence Agemty 

Director of NSA 

Digilail Netwoulk Intelligence 

DiaJked! NTumter Recognattubrnn 

DepaittnEant of Jonstiice 

Emtepisee Learning; ManagamBifit 

Ford^ii Intelligence Siaraeailiamee Act Amemhnmnts Act 
Fedaaml Bureau; of InvefStjgK6it)nn 
Foreign Intelligence StnmtelHamee Act 
Fotegpi Intelligence Sutweilllainee Court 
Inttenmat Semite Proviidbfr 
MuMpifa? Commaimaations Tramaa-tfeknHs 
Master Pumg? List 
NatfonaAl Cryiptoi&gjic Scftorol 
NSA/SSSS Thread Oper<atums Center 
Office of the Director of National 1 Intelligence 
Office of the Director of Contpllittiaee 
Office of Generali Couffissel 
Office of the Inspectaar GenenaU 
Obligationi to Review 
Proteett Anietrima Act 
todiUtcWiii#-..~ 


..;aiD Analysis agiLFtoductiom^ 


ib)(j^P.L. B 6 #(Uf) 
(U 

to 
& 







(U) SIGIMF 
fUl SOP 




* :me ."l- e A Signals Intelligenfc^'Di-r^tM'tttF' 

Signaiks Intelligence 

_ Stanritedri Openatlmg Procedhtee 


(U) SV 
(U)TD 

(U) 

(V) 

(U) 

(U) 

(u) ussro 


sid ^Over^ifnnrarc 

Teelntdiiggy Direetnmftle 


«««««♦ 


Harare 


1 



Bnsr-^-sytt- 

Uniiteil States Signals Intelligence Dimnirae 


to/! v 
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(U» ABOUT THE STUDY 


(UJ Objectives 


(U ) The objj®tivv(o6f tMss was to assesss the adgqpiatyy of 

maragpmrintit co tutted is desiigireld to pamirfe reassmafoble assurance of 
comp liamae witihi Seettiiam 702 of the Foreign Intefflli^aii'ee Sumweaillainsie Act of 
197$> (FISAj), as anremdMI by the FISA AmendmosntSs Act a# 2008$ (FAA §7(012)1. 

(ll> Mettlmtfafldgyy 


(U ) ftf’OUOj This staidly was condhiotfedcl from MarcBn 2011 to Febmuayy 200 
and was bawd on rewitew of pulMih^iadc! and draft foimss of guidance?; review of 
certain! contort is in systems siqptpnrtimgg apjdiitatiaxDin of the amttttcwitijry; andl 
intbsOTewvss with manragpras andl ama%sl£s resgnnatilfle for tangptlngg, approval, 
andl oversight soxstbjjjaajit to FAA §7ffi2 reqaihsansfiMs. (This repoutt of the stodt^ss 
findthggs also imffirfpx)rates infoimatidxBBi than was pmwMdteti snfesreqieeti^y , 
primarily with respect to Findlihgg Three.)} Testing; of the contodks ideatiffedd 
will tee the sinftijjKEtt of a later review.. 

(U(' .1 FOLIO}) The stouc% was condhtfleekl acctaxHhgg to the steairttaaMs of the 
Council ofttfhe MspeeHaum Gemsxdl <m Ikttegfiipy and EfficiemryQpmiihfy 
Starwdlnrtis fmJbmymtUmn and Evalmtixan,, Jamuaryy 20111.. We believe that the 
informs town demMGstt froirai interview® andl the docnraieaiitation resimwedd 
provides a reatsmablde baste; for our findings, obseawattoaaas, andl comdkssions 
amsndling to our sfad|y objeetiMeess. 

(U) Use of ComputerFPPooe<sgoEd Data 


(U) The use of co mpotterpprocessed data was not necessaariy to pecSnnm this 
amdtit, 

(U> Prioir Coverages 


(U/ IFOUQ) ) Assesamwtotof Marra^eiwcfnCo6tn3t9'<MEi//tip)Jbi)i9hSifto9iiFr(UcetProtect 
AmerteaA AqlPfWJlAjf 24SSJ7 

(6/Qf B) j The Assssssrffleent ofManagfianmtt GZmMixhistMiipfilmmtiif the Protect 
Ammwrn Act ofZSQffl found! that adkdittnnahl comnools were needbdl to \wiffyt that 
oo% andhoriiedd selectonss were on collectasn and! that tasked! selectouss were 
prodiuxrngg foreign ihteHHggeaee on the expeettesii tamsptte. The sttiidty also 
identtffedd the need! for more rigontsuss conttrd&s to increasee tire reliaMItyv of 
spot chedtes for PAA compllifnaee (PAA was the preibstesseor to FAA). 












DOC HD: 4273U333 


(U/fFetJOJ- Audfttofthae m^MA rnn d mb nteaiUit (FAA)) §570Z)eDwfi»^cing 
Requreeraetxts 

■“rS^'fl'iFfnttK 1 &MS AudlM of the FISA AmetufomttSs Act (FAA) §7((M D etaskingj 
Requirements |~ 

land! thatt tbs? Agency jdoes not hare® a 

te m fm. 


m <« 

{b|(3)-©.L. 86-3T€ 










DOC MB: 4273U3E83 


top B£aiCf/mmom')Ri\ 


(U) APPEMEINX B 

(U)) FAA §702 Conllrtdl Requih 0 arne©iittits 
and Wlanag®nnna£rrtt Contnobfcs 


TOP SECIttnMIWNOF QBlNl 







BOOB:: 4273I3E83 


top BEeREmfjmmfwm 


sr-ini-mo9 


(U) This pje^f intentiaxraatilly left blamik, 


TOP BEORCTWIfflBMgr ORfN I 




DOOD:: 4273B333 


-wp smmmmmmym 


(U) FAA §702 CONUmOL REQUIHfflairaiTSS AND MANAGEMIBMT CONmHKSUSB 


m a) 




Many of tkr int&mmil conilttH requiiiicjm^itists ate? esMttlihbdci by t] 
smitomitcdd for each Certifikcrttoim, Exhibit A to thf AififMavit. amdl ExfaiMij 




le Agemry sfi FAA §702 tamgitimg j^Toccediwiijss: tn^pro(n^^lo^el^mmmt5^na^^pera«i7 


JKpiHFtolJrr Sectoral 702 of the Fordi^idhteelligemRF SuimyrillacMxr Act (FISA) AmeiidiiiitsiMs Act ©1200® (FAA §702)) 
aiattafityy is & nom-U.S. peasram (USPj) rosemabbyly believed! to be [located outmdke tire Unittedl States?; requimdri posfrtfcsggtingig 


analysis to ensauree that the? Agency does not interntoxointUlv taiqptt a peisaan kraorni attire actpiBsttociii to be in tire 


United Stffdtess amdl doc® not resdillti in intentionnbl accqpisiiMan of doaa&esafe comminicotobans; rcajmiircdl doctuimmittridon of the* 
foreignmiss sldetririnationim; compliant^ andl overaigfet: aamld stftqpcs required! Ilnr depantuiee from the procedures^ ExhiilMitt B 
contains tire rnMnimtuomi prac®ilirees to be usadl for infoinmttftMin collected!, In addittimi to tire contmil reqmiiHTBmMs 
esttatijlisladi by the? affidavits and! exteMifc?, tin- Stafldhrrids for lnKfiinaiJ Coiratmtl in the? Fedenall Govemonmiti pwjvMifeeaa 
geneaniiffemowoifki lo Idf contodks that slfcouitti be inctGqpmitefdd into daily- operctlitniss. 

(U) This doameartt prawfesaa srammamry ©f the inttemail conflmdfcs in place? too meet ttosser reqmeimfiMs 


B-l 
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ST-11-0000 






Assessment 


Control Objective*' 

Source 

Control! Description 

Good 

Adequate 

Needs 

imprawementt 

CU) TARGEMWIG 

1 

1. (U) Detemiirratton of Whether the Acquisition 

(U) Exhibit A 

Targeting RequiremmeiTiffis: 





lo'eseted OUftsKtte tine United 
( 3 > -"Mr i U SA determines iis 3 

rron-USP imaefflmafejtyr IJ^iffi/e^tcSdofeKCitflKil^htne 
United Sflafes imlfptt of the totality off the 
circumstances based on t he information p aaitabfc 
with ie&s^ct to the peifflpnJI j , 

\ NSA 


analysts may use Information tram anw aor more at 
the following to matte that determination; 
lestf information 

Research inn r^S^c±^^ctae0aBS5.aar^a**$erg?ppctet3. 

and collateral ii 


__Jfhi selector taslted 

iOr.ttr 'i ffihe Targeting RaWoimasie (TAR) St&tem®irtt is also required and 
documents why targeting is requested and must indicate tie tie to a 
foreign inieMgence ntoiqoB^spBslJfK: to ihe FAA Certification iMdterwmijm 
targeting i&riffiqpesM 

T 


tdiycuuy 


(OnaD I Atin Releaser irawiiew. Signals Ihte llBaaniKE ISIGINfh Directorate 

S roduct Um {(Ft) personnel Kgwiew [ ~~~ | 

argeting Requests for overall cecamm bin?g mge ^in It the chosen FAA 
rtion before rreteasioq it for afajjMbn[ | 


X 


jQj'Hn yjutiitatmn. All targeliig re^e^tesyito«^dljnddeFiW§P0^ 
Certifications must pass tlhiiis-ir©wi©^for accuracy of processing and 
compliance with FAA §702 requirements. It includes tie 
appropriateness of the target to tthe certification, VtirMcation of the 
support fair neasomnattrife belief of foreignness confirmation that the most 
recent Itategraness support is iusedl : . senrati ttirertt ttte& information supports ttte 
nott-USP status off ittettexpst (See (recommendation 11 regarding 
determination of a single SHatmatoraii (32)fBraAlivfig IPins»s*eattuif© {SOP) for 
adjudication.)! 


<b)<1» 

(bH3)-P-L 8S-3® 
(b)(3)-50 USC 3024(i) 


t op m w?mv wyt ) mm 

B-2 
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Control ObJecHiUee' 


Sources 


Central Otseriptiein 


Go®dJ 


Needs 

ImptraxAffirreaitt 


(U) Determination of Whether flue. /tespietitom 
Targets ittoivUSPis HRaaaontittjy Be 

tested Outside the United States (continued) 


m\ 

(bMa^JL^sss 

(b]P^ use 3G24(J) 


(U) Special 


fOHtm Central IhMlgeOTCe Agency (ClAJitait^cnvmmsmift^IMn 
process. Requests are reviewed for FAA %M2 compliance by NSA 
personnel! 


3 performs tMi® 


X 


adjudlcatenm reeidww 

< G i ¥Ht» FBI Tasking Requests; The FBI iimnpllemented itteown_ 

nomination p rocess subsequent to the field work on this = 


(bX3H».L- 86-36 


■t^s osn i r i r 


tTEh S I tr»f t To acquire c^romwiiications about the 
jargeHIfiSjtta^TC^NSA 

that the person from wtomrri fflseeks to obtain 
foreign intelligence ihiifaMiiadon is located maw 


1 jfNJSAwdill direct 

surveillance at a party to the a^vmrnmuiiTniteaittj cottk 
reasonably Mewacl to be outside the United 
States 


(U) ExhibWA 


(Wl 

(b)( 3 H*-L. 86 
(bJP>- 5 ® USC 


fTD r rGh'Hn I FPfflteffi ame used to ensure tttatt goto: sent) of collected 
communications for DNI selectors isflte^(BBBgesflBSB«Ell ii^irianffiefflls 
lor MtiJfllfylfe Craro<ii^Kflti'3n& Transactions (MO$)}-fiAnht^tLPf} 
Procedures, row 4 ).. 


3024 (i) 


(U) Assessment of the Nwir-USP Status of the 
Target 

TO- ' Hr , i inform alien that INGA ©ssanimes to 
determine wMlner a target is reasonably believed 
to be located ©ufeiafe tthe United Slates m light also 
bear on the irrcniTMjJJSfP^mtigsodftlhte For 

example I ~ 1 


(U) Exhibit A 


(U) See ¥swn^lri® Requirements (rows 1 and 2). 


<bxajH».jL.asa® rtffi $ r ECftE 

B-3 
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ST-i i-oom 


top smmwimmiftym 
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(bM3)HP.iL.aaas3K 
(b)P)-50 use 3024(t)) 


TOP 

B-5 






















DOCT>:: 4273B3S3 


ST-M-O0W0 


Conkdl Objective* 


Sourcse 


ConlfrtOl Description 


Good 


Needs 

Improvement 


II. (WIWMtWj POST -TARGETING ANALYSIS BY 
NSA 

- pW Mr) Post ^targeting areally®® ie&atoa®ned to 
detect when a ff®tsawm wtf© When targeted was 
reasonably IMoNwd to be located aaufisidtetttBg 
United Sfefes it^sir^efrijtoe^tliite^iYtieeti Sfettes 
and will emable NSA to taUse 
intentional acquisfijiM sfroasanmiwifli^^ iiirrwNii^ 
the sender and alll intended recipients ares kmawm at 
the time ©If arapiisiitiian to be Itocated In the United 
States, or the Intentional 

is in the United! Statte Such analysis rnrsiy iindbnlfe: 


(U) Exhibit A 


igtHWN NSA r s Internal OUigpifalfl to Review f01FR> H 1 ©# rsEftiiraa 
analysts to i|D®rffeiimmn reviews a&lfellbws: 

initial collection must be reviewed \wwtHrihn 5 dc±^$. to verity that tfires- 
user of the selector- is the intended ftaueipm imNli^roee target 
the target is ^ppr©priiate to the FAA Certification ujimdeir Which ft 
is tasked. anti) tttv ^fetttor i ssrrtoti mrt ItfeeUd rttf dtS&ttoes ora USP 
Collection must be reviewed at least every 30 days to affirm the 
target's taeigrwwess and non-USP stteflus sainstfv^tii^ytlt)to*t 
information ctomed is not erf a type to neqplre immediate 
destruction (e.g domestic commuritaatiOTss) 


mn 

(&>$P)'P*L. 86»3fi 
m®m usej3024(i) 


he£ 


■ TGlO[r - Nr !| 


4*^ 





m u 

ibW3)yp.L.mm 

mmsm mmm mMmmmm jv 
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Contrail Objective' 

Source 

Control OescriffltKMii 

Assessment 

Goedl 

Actespstte 

Needs 

Imptnajvemeimt 

8 

111 ((U) DOCUMENTATION 
tifl^WAAnalysts wte n$<jpsstt 
document in the Msmg atottetteEse seaitfditon or 
entailers to the information ttt^stft 1 tefitttwmteo 
reasonably lbelli©«ettliat a targeted person iis 
located wjlsicte ttirae United States ®$*Die taskin® 
is approved, the database ©tftijyfoir that tasking mill 
be reviewed to verily that ire- etottefosas entry 
contaiins tn® riiiffirasssaii^caliataris. 

I.cvlir i A citation iis m n®fil®i©iti^ the 

(U) Exhibit/ft 

<bM3HP.L. 86- 

iMWn AH targeting requests suiUamttedl under FAA §78® 
are subject tto rmjrww by an adjudicator lor verificaton of compliance with 
requirements including a^ffifpifislterasss of the ttottte O^rttifiication 

support fbr determination of foreignness and US P status. and foreign 
intelligence purpose. The adjudicator iis nsspemsifete 1 for ensuring that tine 
support tor reasonable belief of foreignness rs documented inn a 
database maintained toy SID SV 

"".(Oll'M-fTtnue ttwBBttnp r^pxaria^tltileea^ia^^Sftt 3 o athaxjiffie- from a 

menu of foreign itotollgetnE® purposes spssiife ttoffi 3 BDdtilR 5 (VA§ 7®2 
Certification. -Once the ©s^iffiG^imni ie&adtiasHsan tMeeafla&efcrmaBfefeeldettoa 
f-........-.. Wsocteted with that fi*rtfccation. II WwC I I ! J 1 


n 


will malintiSm TTiBwWlWi ^UerMblelhQSa 

responsible for conductitn®m®rai#ri(l to legate and 
review in© iiirfterrniiiiatliion that led NSA analysts to 
conclude ffltiat a target iis ingosamgstoiiy believed to be 
located otuftsirdle tttr® United States. 

fO'i'NIVAnaWste allso will 

.V m ~~ .labeiut which fluey ©frfpssatto 

foB/taW ribMgiti'iiMiphc e 

>--:=== = . Iis not m the menu.. tUne asltesttor cannot be tasked wwGiterf 

FAA authority 

36 «P») 

^ (bM3H*.JL.aKWBB 

(bM3)^D USC 3024(1) 

9 

tv. ^'lOWtSMir AND (COMPLIANCE 
fiUWNSUQjSV with NSA's OSC will develop and 
deliver training ttoeBT®jui®ttttoi^GSHfnT^I 
re$pon$i bile fbr agppr©iv§ng targeting of person$ 
under FAA §702. as well as analysis with access 
to the acquired foreign Intelligence ilnfenmi^tiiErin 
understand their responsfliflties aimUlie 
procedures that apply to this acquisition. 

(U) Exhibit A 

iUJ.'-.rauo|i Adjudicataais an® aittpott to the samettraining requirements 
as analysts They also tare n®Q 3 @ik»©tiB iFnpssFBEonntftaailiriirhgpoQrtttbet^i^gftligg 
review process. Documentation standardizing te information p®woteeij 
in this Itoamng has imait HrsOTrnaddmrautelalfelEODhltaef tor reference by the 
adjudicators 

l(UM=eWQ) SV and OGC developed the-'FISA Amendment Act (FAA) 
Section 7m" eaaitse (<SD«^12^)wt^iF^ It 

locuses ®tmth®lfe^ir®giirffiTr€ 0 hfe of FAA 

((U. 'FO^Q-) A new course, '"FAA 702-PracHcflil Applications- 
fCRSK1304),.v«aa maolteaAaaitettifal 1 It provides armaitosts with 

detailed ©samjpjles of use of the authority. The requirement tor its 
completion i&iratt yet enforced (see ffltesrnimendatton IH). 



44 


(bj (3)) -PJL.. 86-36 


B-T 
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ST-ll-aW9 


Coimtrdl Object^' 


Source 


Control! Description 


Assessment 


Good 


Adequate 


Needs 


10 


I W&QW) SV has established pwcGuraaaasrtor 
ensuring that raw traffic is labeled and stored only 
in authorized rs^psafories and is accessible only to 
those who have had the proper training. 


(U) Exhibit A 


{W VQDQ tM collector stores must be compliant® cfflfttffetlb^toeellteqy 
can be used to process or store FAA §702 data. 

((UJ /rOUO» Ail FAA §702 systems are certified for purge and access 
functions. 

{li kjTQUO j To obtain access to the FAA §7 02 databases in dividuals 


((j >)(3)~P.L. &3>-3W must ^ave an approved inioaiipnrfenHaectlM 
T " supervisor^ appropriate ttiteatarcee s^i 


J by their 


_„^_ rr ...Itsomiiiflitsit'-npast ionthe 

} tem), and required training 


I'E^eivi^dDtriwailigieiiBDe^lAriontles USSID 
Monimizatoro ffhHeafcliinees.and OVSC12HS®). 
fBUEH'OTj Request ftaranaflyste aacees3d|T 



Jaccess must be 


oe suDmflmeia , 

approved %th ^c:::r!j~| owner. 

HUt'. -POsw tn SV reviews requests tor compartmentedl shessssss 
that the analyst has required training and an appropriate jpatilcalion ftar 
access (e.g.. includes mission junction, targets requiring FAA access) 


ire not able lo verify an account hofaer^amDriuling en'gtbtllty to 

access FAA §702-derived ooltedtam Eiigiailtty os dtetteinmniffid 'When the 
account is establiistatl Compliiaume® swti[tin^ffimruiia^Jrraminip^Tnaestat< di psqbetate 
tea hm ts not .te iriffiBrtl ait atom- an a fter as&B'URT Illl|a (thit was; Aftnuated 

for[ fin a system update) 

9). 1 - 


(see RecommnfisrnateEltoEFin 


m) 

BM9-RL. 86-3fc 

a*l($D-s» use J30 




(b)(3JHPX.®-36 
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Conte! Oifajecttive*’ 


Souinse 


ContiRMl Deseriptiein 


GcxMl 


Atteapstfep 


Needs 

Imprawaffneffitt 


( U' ■ roUQ ) SV wii conduct aswaisa^lrtt saflt^tesaaiold 
will! make necessary n^pantts,, iMh«tSr?gtlttjQB& 
renting to iinncintenis of non-fflBwinirtfflntte, to the NSA 
Inspector GetierallagHtiaHSC:. 

-teMffctfy'SV wiilll sails® sraunetthat corrective ®ctoims 
are taken to address ktertPiMeatldeficiencies. To 
that end. SV will ©widtef periodic Sfpott atharit® of 
targeting dtecisiawms and intelligence dhssemliimsatiicDimB 
to ensure cwipiamce with established procedures 
and conduct periodic siprltadtm^affofqiffines in 
data repositories. 


<b)(3)-P.L. 86-36 


(U) Exhibits 


(U) Incident Ftepaatljirnigr - see mow 13 l 
4 Wi«6P**^SV performs the fcrillsro^ w ariagjtil aottwtitess 
- [ I newly fasted car nea^esofl before 

sending to DOJ and Office of fne Director of National ItnflKiliigietnKce (ODNI) 
bNweekly 


Review lairgeting aufjffsrjttlfor the bulk of items requertBd ttw 
..DOJ/OD NI for the ©May masaiaw ! 

— 'j I support ijs iinsiiMtorit. w wHlitoadto* up witn trie acaiUOicatOF 
ana targeting aamaill^stt I for additional support or corrective actfiswm (('including 
possible dtettessHairni i 

-S^pBOt ctieck sarniKilEsali reports basedl asm F^g^iintomtolibjn, | _ } 

reltQrfScontaining USP identifiers, andgwaHuatted. wNn'wirig^trgtff^Oili 


J feHengg-opetHetentified 


discrepancies Provide vecxmS of ail FAA (pag-derived dissemination tor 
review by DOJ/ODNI and ftoldwiijipam 

review.. SV s soot check of serialized disseminations does not include 
procedures! | 


j---' :1 v .^r 

compliance vnth 'tbErra^tnit^rani^ceddoEes'ddoDuiBQtondQn 
requirements for dissemination derived tram IWGTs(see 
Recommendation 4) 

- Oversight of Queries: Alll Gpsms- irrn 

the Slllts pafliUKctfiami centers. SV has mot sMmreiiwEfled reviews ol auditor 
performance consistently fsee IRsCTninmrBiTrGilattion ©}> 


86-36 


mn 

(a|P)-P.L. 16-36 

OM-3)NSO use 3024(f) 


12 


( W i roilflu i DOJ and GM willlaamfluct oversight 
of NSA's exercise of (FAA amtHfrcnritt^] wttialti 
wi llmdlufitte periodic reviews d^yDQQQUjentiOONt 
personnel to evaluate the implementation of the 
procedures. Such reviews railltcBiauftatfltaatfta^ 
every 60 days. 


(U) Exhibit! A 


HUt'i EiElUO) SV coordinates bi-monthly iswiigm by DOJ/ODNI off taurgiiefting 
and dissemination including rng^^MrmTHn^ tto'ap^miStcTrisrajafieldaaniild 
providing fltedtadfcsssstom to adjudicator on the overseers' findings. 

, O' 1 'Oli' Hf > D OJ performs tr®v*ews every ffB0d^aavi&r^ 
dissemination for a fwvMBoalh period. Every 15 days SV sends a 
document to EHM tor each cartificat m one each tor DINI and ONR 
fisting sdlltths fegy fields torn the review. | j 


oS the sdtectoirs cDtaseam tor review.. 

material Ifor each a 


j DOJ sends NSA a spreadsheet 

* must gather all^fppifrflrrgi 


L. 86* 


Ttpp x ' RL'tojtfm mvorttm 

B -9 
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ST-111-0009 


Contrail Objeutive* 


SOlUlTSB? 


Conlta*! Description 


Good! 


Adequate 


Needs 

improvement! 


13 


l(U/ *OUe n NSA will neflamllto DOJ and OQNI 
incidents off non-cDmplianoe wih these procedures 
by NSA tpenssam^ 

targeting of a person reasonably believed to be 
located \m fte White# States ttKne intentional 
targeting off a USP aw ttttne inrtienrtfiEBitifflll a^uisitiion of 
communication in which tHne ssmofer aarrotjladll I 
intended recipients sai® Wtrawm at the tiiim® of 
acquisition to be located vwiittlhiiiinr ttln® UJjhriitteatiaaaites 
(iU- fPUO i a NSA vawiilll pCMidteSLuaitir^ptrttewitithin 5 
business atta^ of teaming of the iinciident. 


(U) Exhibit A 


(dJ-E QU C D Information sBcapiirediff^iirtbJrttoi^liy 
targeting a USP or a perscm matnssstsamiGSiri^ 
believed to be oiuitsircte tte uumiled States at the time 
of such ton^eing will! be purged from NSA 


(U) Inddent 

'{W' Tquo ) SV and the ttamg^tiiimgi tteamraagaBaru tti pStentiial iiimciidenits 
i&intlv §V mmmtm rm&fa ef the meietentelr-:===.. 

- nJtFH- 


jin a Staedftohrtt tMb&&a,se " S\V manages 


-fr m+m c reviews m iW6il^^UI»ffl9tete Vffoetto* ft 

meets ttfo® criteria for reporting to QKDUi OtHML For incidents of non- 
compliance with procedures (e.g... failure to appropriately dtetask a 
selector over-caHection), NSA must explain wftw and what 

steps were faten to remediate the matter (e.g jpiu^p ateto, prawtfe 
additional ttraiminnt) DOJ detennines whether the matter mmt be 
reported to fee FISC in accordance with Rule 13(ito>(Dfttte[fll3aEinRiifes <srf 
Procedure 

(U iC Tamgptt off FPrrnsersy IIrrrttenestt (JKER® I)i provides SVwtih the 

parameters IksHf necessary g^sallBglifin §V inters in the_, 

incident record in ShareFRuirtt. SZs l. . ) 

=l~ | uSe&s this i»ntonto1®iri to ifrriitTrfe^h^ purge process uffiiiftymg ttiiat 
ft&e M ip&mm£ters inclu de all asfltotred collection wlboxUlCMtaipEa ijpfemnialio n 
eiigibtetotin^tertSGtm.ll I 


J lThe purge (pimssBaB 

ltd 


Li^Bfey’'4^'’fnsnhtVaT::cV^^"aI.rmcoinnffi.lete or untimely 
purge (sssciwiion (see Recsmuimetnidation S). 




t. §fr 


the fetiliewHufli? process to prodluK® the required notice to OOJ’OONII wlMdlm 
5 business attys of confirmation afTamimiNtanti 


mm 

;b)(3)-P.I_ _ r 

&)|§}:S8 Efe; 


■36 


(bpp^iL.asaBs 


&.J0 









































DOCUD:: 4273D353 
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Coirttlrall Objective*' 


Soil fee 


Control O@soriptioin 



Gmri\ 


Needs 

ImptttBvementt 


14 


VS 'Nr i NBA will report to DOi) and ODNI Incidents 
of non-compliance (indludliog over-ecstlteetion) by 
any electronic communication service provider to 
whom ttfte Attorney ©amaiail asrott director of 
National llrrHsJIf^emice Issued a directive under §702. 
Such report willli be made wiittriim 5 business attars 
after determining that the provider has mt 
complied or cfoes itMft intend to owplly wrtthsa 
directive. 


(U) Exhibits 


'tlfMtttftlfft Pm OGC. the same i ncident tnepcMti wQ process is used fa r 
matters imw fliMwrcii providers &irfc neiident nsrPcams C 

las a result of prbvider error have toeeim fried with the Fllg 


\m 

(hMSiH-U-. 


86-36 


IS 


M the ©went tftnstt NSA concludes fiat a 
person i& Reasonably believed to be located 
outside ttte liiMtted3to^&aaiiciy .atitteitasggfehgg. 
learns fratltt&iTiemrini^iiTSii^ the United States oar 
if NSA condJifiEfes that a person, wto at the time of 
targeting, was believed to be a non-USP was ihn 
facta USP itwillltaiteti|1rffiMt3wii®s4a¥tE- 

1. Terminate tfeaocrp'stf If NSA 

inadvertently acquires a communication sent to or 
from the flswiett white the tiaitpti ws® Itelted inside 
the United State;, imiiUcHii^ciCTnmEnau^^ im 

[Match the sender and all Mended recipients an® 
reasonably Itaelliewsdr ttoiirelli^MiriiBfdldetitbdJtlrtifldd 
States at the time of acquisition, such 
communication will be treated iimaEffiGMd^ 

the minimisation procedures 

2. Report ttftne inrrptdfemttttoOHD^aanratiG^^ within 5 
business atia^s 


(U) Exhibit A 


-f ifiet ' jruri) It is the analyst’s respsDnifflWallity to follow up on|_| 

information from rismewof traffic and dtetasJfesdti related selectors 
promptly if the ttattget is m the United State or identified as a USP. the 


primary uisetr its 


_] An incident is initiated ! 

idiitttfic-atlor|^roaintwnto ora change in USH siatus through 


] The 

targeting team wopI tea with SV to d o cum en t Wi r e i ii n g a e temtl Mormattiiyn 

captured imlttnsr Incident (Rtqprttdatabase lintdludes the detasking date, 
whether other Electors associated with the Harnett wen® detasked, amt 
parameters for purge of communications collected that are ineligible ftot 
retention. SV follows upwih PL personnel to ensure that the inciidteint 
record is complete in cluding entry of purge criteria. 

■ ^j' ' T 'i ri | --- fc dectdr management ensures that ll | 

. absen ce. | 

BO | ° resjptairg.iDFte tor ti mely follow-up. 

Note implemermlt ion oi l ( will add 

controls mm tttre pcssbssbe. .i fmrFfUjira^p?m?rtt 
to document ttharrmAtessw/ that the rmciGtetnt naearntf is complete, 

imyp.L' -" | 


(U> See (tow 13 - incident Rtepwfflirii®. 


Hi) 

(0b>(3)-P 

(b)(3)-S* 


L. 86-3)6 
USC 3024 )(i| 

ft 


top scoi i oia^wflFftRrir 

B-ll 
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V. (U) DEPARTURE FROM PROCEDURES 
T O'<»r ; i iff. to protect against an immediate threat to 
national security NSA determines that rt must take 
action temporarily imafli|parasnrtt departure Unarm 
these piasceiiuii^ aaddrt is not teas We to®tttainn a 
timely modification firoino ttn® 

Attorney Generali and Director of (National 
intelligence NSA may take such action and will 
report that a«ctM% to DOJ. Under such 

circumstances NSA will cominue to adhere to all 
of the statutory Imitations sattftotfh In the Act 


(U) Exhibit A 


:(UJ'" EOUrn According to OGG such actSimn® vw^tflltoaara^ toy 
that department santtimAadtAffi geareamrart at the Irigjhesl Itexwells offttr® 
Agency. DOJ/OONI vmbwM be notified No specific p®EBatluii®s oor 
controls Hi mm timm ateouritopail. 


(U) MINIMIZATION PROCEDURES 


tl (All)) Apiquisrtiori and Processing -Gferreeral 
ta) Acquisition of information toy 

targeting imroim-USlPs reasonably believed to be 
located outside toe United Waites fprswaant tts> 

FAA §702 will be effected in accordance with an 
authorization arnadle by the Attorney General and 
Director of National Iht&Ngpires® and wiilll toe 
conducted liin a manner designed, to toe agresatett 
extent possible, tomiiirimrifee the acquisition of 
Information not lellewfifitettitfflceulttiorized purtnasee 
of the acquisition 


(U) Exhibit B.. 
Section 3 


T0r * Nr+ fiee targeting and aC|udfcaiftiOT paraaBsass ftom&fmess criteria. 
TAR. etc. ((m ows 1 through © of Targeting I 
t TG-BP i NFt | ~ 


W rgQWQ ll 

ies over-ooHedftem eventsT 




ML 




"Ithey may stop collection. 


3 


■ query procedures (Mme^j^fiEre^iemssmte lor use 
In query sel ection terms. _ 

id vHD t Dripty Mite of queries | | identify overly 

broad apieiriies (excessive targeting. 


fl& (3)-P.L.^36 


urn) 

(bM3)-P 
(b))|3)-50 U: 


68 

!8C 


-36 

302 


B-72 
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Source 


Contnotl Oeseriptiom 


Good 


Ad®^issfe 


Ne@ds 

Impfflsnvement 


(b) flLty Monitoring. Recording. aircUfffcE^sfim^ 

(1) (CM tSlti i J f y) T>R^spcaini9#imlJlte)g0ners&^aesa^nBibl^le 
jud^msntr in detefflfriirriifrciji wttistflrar i irttoim^itbirri 
acquired- rmnsthtemw^^ aamti mW te»n» 

inadvertently acquired communicate® of or 
concerning a USPafttthe ©attest practicable point 
in the processing cyde at which smdfo 
communication carmtj»ii3tmitW®d either as cleai% 
not relevant festthe authorized purpose of the 
acquisition (e g., the (WMirrmMiffaaitm artiestrrartt 
contain ftasaign intellliigetns© irfoirunaliuMn or as meat 
containing evidence of a CTfimsttlratt m^y be 
dlssenninraiteifLiinalteitli^dep|DOBeeUcBes. 

Except for InriMtettttansatfliinsn ftaarn 
upstream aailtesltorn saobhnad'izteddatfyiy acquired 
communiications of or asMsenriritT® a UJSIP magr be 
retained no longer tttranfSyyaas^ ifroTriftOExpipi ration 
date of the cetnfiiffiia^ttiisntn ^daMcwDiEaiingdt the collection. 


(U) EattilUttES. 

Section 3 


(UWWWG^URw FAA §702 ttraining (Eaauisae (GDWEEEt 220?) sppetf ifeestttfee 
step© anrai}$stte aretatiaH® to analyze oocnmiTur^^ for 


(b)K(3)HPlLS8(i 


T provides diBMtron for amttftesbfeaas 

Iwflher the &^W£KoiQiti&Jtanb&United States at the ffimsoff 


collection issf<boe^ 3 nopclQlioni«!^sct|c 

f6HNF7 Unless an incident is reported ffnrniitrnpi^ of such 

CQimrmiumiEatitMS. ffilnstiffiis no review fpM®ss. to ensuir® tttatana&h&fc&s 
identify and) (tetrroy them as. (required. The ©a^i of such (BOTttrallweou^ 
prohibitive The msapirement is that all identified issn^&o&imrppupper 
collection be reported to SV and an Incident Iitntttatod. Perfonmaiiwce 
stauieteirdfe anatl afimd^acdlafflltLiali versus ®»fpeEtted performiamarffi aaiuJatl 
improve accoiiiimitalhiilfty ffor complliiamce (see Btec!imrn@id&lt®m& 1-4).. 

(U)i E*arnirirattam of retention cconTttraife viraasriot«t riakJcteftd di rtrt hiN-3rgrei“ehsf'nv 1 

mi 


J)-P,1L 86-3B 
(bM 3)-50 USC 3' 


it 24(1) 


■■. j..}!. hrrr'j 


(4) l O i' .O i ' i ljr I As a communicate is resawed 
analysts wlllattetemfe wrtiBattw if is a domestic or 
foreign comrteicaflOT to. ffRm.cnralhadtaad^get 
and is neasaainably believed to contain ftDOfgn 
imitt©JII@^aTQ©^ iwtorwmmfeaifir. or evktentic© of a ©limes 
Only suettn tramniuinG^lfijJtss m^y'blseppiwieeseeld Alll 
other (Garnmimosatims may be retained or 

inagaard^^ with flmBUEB 


(U) Etffifflm 
Section 3 


n 


_ I ptrgswreteis. otftiegitidmi for reteirstiioins-tstiMlnuusltrorr on the tos 

of whether the fait^w^awtifc&ide the United States at the tfimreaff 
collection and wltii^lirerttteccffitiinTunroetitioniisrfte^orotDr domestic. This is 
covered in detail inDV'SC12Q0 tide (i®^r^R?^§pei‘r&iaifi@ig 
(U) SeefataDGlMSpite to Review - row Toff Yaa-cgaiin© PtmEastfo^. 

(U ' -FStittParamste for purge of collection associated with am 
incident! aneeppiosnddeldao SV by the TOPI and leoondtoMtteirioiddetii 
record lm airamaffb&htt 52 Purge and Pretasfeiing Compliance uses tttris m 
initiate the purge 

' WffliwttwiBifnM MwmrnaWm for tamsim 



< *)(3>-PX.®33 


l SV performs foltow-op 

lto verity than Fwifeje?ajrdlHt'etoatekiiggUiDajTnp^teroee hhas updated tH^iifRn®l*fiti,t 
record witthttltesttolaaDtippcggeaEm piptelro n. The puuige ffrtmgss (idles am 
manujiail fprsoaetilures that ott a risk of incompliete or untimely pptLrrge 
execution (see Recommendation 8)1 


^ Gr ' Q^ t ^ h SV works with TQPIs to prepare dsslIiRiidfmm 
objects that meet BMii^^cxrrt^aftaBiKteoam^reigigBiNtfaratntfclCBri^iigiri 
intelligence value or evidence ari se crime or threat of hamn.. TTfte 
Destruction Waiver muisd Bffia^psccreedDiapRRBAA. 


for 


top sccneimmvfrtm * 

B-13 
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ST-ll-MTO 


Coiratr®! Objective* 


Source 


Control! Description 


Assignment 


Goedl 


Needs 

InpiwenKA 


tilt (fr)(S) (Tfi l Mffl i HMF) Processing of Internet 
Transactions Acquired through NCSA Upstream 
Collection Tetdiimiapes 

(a ) (TGflC l jffOT) NSA \roil1l mte n@asmtetesifei|^ 
after acquisition toidsnlfjr arrreU sspeipae through 
technical mssm Intenrre# tnairsaetloim fiat cannot 
be reasonably identified aeGContainitngp siipgll©.. 
dtoeto carnmurdicallmm m wfiriidn the active uiser 
of the traimsactim (i,e. the selector used tea senrnti am 
receive the Ibiaaammdt ttesrasaattbon to or from a ssaraiee? 
provider i is reasonably believed to be located In 


(U) Exhibit B, 
Section 3 


(TBIIS I I I tfF ) The Technology Directorate dewelbpeid fprSHHoifUjaffi to 
analyze uifsaream confection. Data permitted ffor use by analysts must 
have tune aasttiHe usear (tsaarnetteroor recipten&M tite flawget or be outside #ne 
United States ^oiir^Nvamrcoxrnm^ U ~ l ot upstream odhtifiofy. 

Data s sequestered yyh^P Wli^M fr.be ir 

the tihrmtesti^atebl 1 


the United States | 


3- 




¥HfirSuch segregated 


communications will be retained in an i 
controlled tnsfpsasiHiaiir^ aecaxeeseBititfeg oicrl^y to NSA 
analysts termedl to review such ttiamsadtrarms ffor the 
purpose ot 'ndtentiitying those that contain aif senate 
communicaffliims in which tte saanriter aairattsdll 
intended raaipistitfe are reasonably believed to be 
located iim the ikltnitaJt States. 


rfi^iS l . .‘NT \ There is no terming «wm use of MCTs at this tiime (see 
Recommendation 11), 

m\ 

{bK3>-M use 30M(i) 

(<tii/ TOUOi Efforts are oimgeang ttn atfeexodtCRri t^wBosaDtiuesi ter nammxmr® data 
from se^iesIratlSoo and special temim® for analysisurthn will process ihiis 
data <$m ireowinmairKlation - in process). 


■■Tkxur m m . si mmmm saltern 


II (tt)<Sjb.-((imNH NSA amtyofesasHiirogtto 

use a diiscrele fflammumiratiQint wnttiitiaanl Nftcinefet 
transaction fnatt (acantoina multiple dBaraSe 
communications will assess whether the discrete 
commuriiB&toinn (1) is a communication in which 
the sender and aHi inrtbndbdi roaiqHBilto are Ifocated 
in the United States and P)) is to, from, or about a 
tasked selector or otherwise conriaims foreign 
Intelligence RiniSoffiTrTR3tttofni. 

II a:m:.-.ib 3 -> TC-frl -H ^ r 


(U) Exhibit a 

Section 3 


training amatnpilicaiomavitniQse procedures has not been developed 


(bJTO 

(bW3H*.L. 86-36 
(bM31-50 USC 3024(ffl 


my ‘ at?cw fTny^wjrr^N 

B-Z4 
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111 lUa^M'lPi Magnetic tapes or other 

storage media fflarnfeatiriiii^ FAA §T02-dlarived 
communications may be queried to identify and 
select oaimmiiiirniicatibins for analysis. Query terms 
used mil be limited to selection terms reasonably 
likely to return tor©^ irrtoll(prinE© information 
Identifiers of an identifiable USP may not be used 
as terms to ridlert% end select for analysis any 
Internet oMiKAin acquired through NSAs 
upstream cofflledfiEwn techniques. 

(O^Oli/'ffTi) Any (use dfl PSP idtentrfiers as terms to 
Identify and select communications must first be 
approved In accordance 

MSA \w«i nircarntiam restojclfe of alit UJSP idtemiffia® 
approved fair we® a® ssifeHEtton terms. 

(U) Exhibit Efi, 
Section 3 

(bill)) 
{b«3H>.JL 
(bp^SB l 

iO,'ttr,i GafeBdance on queries of FAA Databases states that MSA may mat 
use USP names <qht identifiers as selection terms When reviewing 
collected 

CU4fgGfafeij»T Queries arc* guttpsttttorea^^bfyvaiaiito in the 52 
production centers to verify toaf the query has a foreign intelligence 
purpose witlrm miffistarr ss®a^c^t®©SE>ri^i;ve s&foJtides ppcttetteb ottete 

Reviews off the audits by PL personnel have not 

been regularly executed by SV to ensure apialliiiy of the audit pwosss (see 
Recommendation 6). 

86-36 (bM3)HPll-®-36 

ISC 3024(f) 



a 

7 

Mil fc) tLi'.r QUO': Destruction of Raw Data 
i l.iL'.W'.'Ml tGflmnmunbathim& acquired lurmdten 

FAA §7®£auaHi™«ies other than through upstream 
collection W oto rratt m^ith®re4totiii®Hisstan(terd^ 
set forth inn Utese pamssstUrm and ftnat air© Htoiown to 

(U) Exhibit B 
Section 3 

‘-i—,-1-1 

III _ (provides direction tor retention/destruction on the basis 






of whether toe to^w^^^tttetltoeUdrtteld at the time ®ff 

collection amflwJtB=ttt©rt i s fei©gjBaii rctoJiri^ito):. This is 

also ©evened i toi atettaiii i in 0 VSC 1203 the required §TO2 traiinmng 

(U) See 3dto> ©tolpEttointto Review- row 7 of Tairgsliin® Procedures 





contain c^imrnTuijxricatiioirrs of or ecuncemiing USPs will 
be destroyed upon recognition and may be 






retained m Ifcmger than 5 years from to® eapnaitton 
date of the certification asitooirizing toe collection. 


documented for authorities including FAA §7©2. fPUngps are identified as 
part of the iitfucideimt SV and Ite© TT©fPli t Fte 

purge pairaiimsters In the incident irecOTd arm to® ^Satar^RjiifrtlsSbt Tirilge 
ourae adiiwdicattoim t^nTiFdWtonrBsrteeeiachhtdio VMifV completeness of 
items ieteftiitiled for purge ] 



a 




J llPurge 







a®UU4tcatt®n anal ®«®EUjJilion fe mannwai and subject to error auecitng 

completeness and timeliness <$ee Recommendation 8). 
t U. r«t>gtT Purae Pwaagss: 1 1 It 

)(zyp.\L.m- 

56 





l | are 





responsible tor detettng records from thesr system omtflteba^ss of a 

Purge Exeaulte Order., to prevent improper ms© of purge records to 
support nesparttNi.. 






II 





(bP)' 

P-L-S&-3® 

1 





(bP)- 

50 USC 3024| 

iUU) Retention -©aweddEf scape. 





jqp lyBCBE mm, w row f 

»-J5 
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ST-1 1-0000 
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SountfEe 


Contes*! Desariptton 


(b)K(3)HPli- 86-3® 


Good! 


Needs 

Inriptiasvemenffl 


i;TEJ:S *vfr l F 4 Internet transactions itMtaraaniGiiutart 


through NSA's uiflHtteamn collection amefl cstfeo rmartt 
contain iipflwmafon tttaft rri®Sfettte're4to , t!iin>iiri 
standards sat forth in these proadUMies and that 
are Known to contain communication of or 
concerning USPs will be destroyed upon 
recognition. AJI mpsttream collection may Use 
retained no Itagpir tttBBT^y^EF^foinnitlttetes^iratlon 
date of the certification authorizing ttte^taattajri 
The limternet tiransactiioinis that may be retained 
include those of 

limitations m NSA's ability to filter 
commurita^tiims 


(U) Exhibit B,, 
Section 3 


(U) See alto (Sttilgpttbim to Review -rouw 7 of Tarrajeiimgi Procedures. 

l 

Jprovides (direction for rietetntomclte^tiujnJlion on the 


of whether the target was, suitisadte tfflslifriM Stales att tttne time of 
collection and whether the commuuinicatlon is foreign or domestic, This iis 
also ©nwaredl irndfettait in 0VSC1203. the required FftA §702 training. 
(U/fltfflflfiSy The need to purge (EcjmnrTTnuainiiG^Eime. Is identified a® part of the 
incident invesigafani process; SV and the TOPI capture this (purge 
parameters iin the incident record on the SV SharePoInt site, The purge 
adjudication teamngBffftornts research to verily completeness of-femns 
identified for fpLi^p*. FRug®? adjudication anti esc&sultiftni ssrmMiad I sated 
subject foemrar affecting ©wplleteness and timeliness flse® 
Recommendation 6). 

(U) Retentiiodi -ootsadde scope. 


WTO 

(b)PP»lL.aK3B 
(b)PlrH' use 3024(11 


llll(<d) ((HJ)CQtairfp& iirm Targets Location or Status 
"TO 1 0 1 '"ftf -h In the event thatt W&&ot&teTrrifne£& that, a 
person treasonably believed to be located autfedte 
the United States ami aftter targeting ttfn® fpeamm. 
learns tMnal ttlre fpensamn isinsdfetWeeUWirtftetS@t«eaDOF 
if NSA comctates that a person wHim. at the time of 
targeting, wasMB^attolte^ mt&ri-UtSP is in fact 
a USP ittesa^iisillfiBinffarnitMaat person will toe 
termtnatea Without etetay 

(Si .'Bin liWTj iOJimrrriiiiTiifDSEtrions acquired through the 
targeting of a person who aittltetiirra&afftm^tn® 
was neasOTTnaMy believed to be located outside the 
United States toutvwasimfMIta^^ the 

were aecapned aairoilanyy communications acquired 
by targeting a person who at the time aft flaitgetiiir^ 
was Uiisllievedtto be a non-USP bajitt wssbee i inffedt a 
USP. willi tettieffl^aEcttonBe^liiE a^mMcatSirsfira. 


(U) Exhibit B 
Section 3 


(U) See alto GHtllgattion to Review -rrow 7 of Tanaaflfirngt FFttmsdluBBE. 
■.Qn-U l Wj Detasking gjutfaiKfi iiffiess tthstt armdtyatSB saeeresqqaaBTE^Iddxte tor 
detasking a selector upon review of content ihroHisatrig; that tide selector iis 

used bgra USP, confirmation tetttttretotottarrifc hero used bV an _ 

individual in the Whitted Sfattg,|T 


(U) See row 7 for purge paoenliira&. 


mm 

(DM3)HPX.86*3fe 
<bM^.$G)USe$|024(i) 


iW ftmm T/mmmws 
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IV.\7JErtofrr Acquisition aumdl Processing - Attorney- 
Client OameiiifrmuitTkatiKQiinis 

j -i I&M4F) As soomi as it becomes appanemtt that a 
communicatiom ts between a $mmm wh0 is known 
to be under crairimail itradcJtnwitt in the Ulrihedl States 
and an attorney wiigprapaaeitts that irndiwKtaall in 
the matter, rnmimtoitiirrig of that communication will 
cease and ttii® GMirnirrM as& 

an attorney-dferrt coiimniuinicatron iina log 
maintained for that purpose.. The relevant portion 
of the communication containing fiatt saMwemsafSoni 
will be segregated, and the National SeiDiaT% 

Division of DOJI will be noiiM. Inanition, alll 
proposed (tfesaminatoins of information 
constituting USP attorney-cHent piiwltegmedt 
communications must be reviewed by OGC before 
dissemination. 

(U) Exhibit Bi¬ 
section 4 

tcri T OI*'Ur > CH3C reports Utatt n®inrerttearoDae® off sucf* collection tone itossin 
identified ffo date toy NSA .aantl-tHratefoes .noddggihas been 

initiated Such instances wmitti be rare ((«.#, it ^Midlrtsimiiiram^ if a 
person ireasamably befieved to be outside tlhe liMfeatl 33tt6stte«@*tei±>$ry 
NSA Is known to tost urrefer ImUGHnwlt In the United Stoltes arpdN®^ 
intercepts a comnnumiiicaffiicin totetaeen the target and an attorney 
representing ttttetftoEejsgn person iin toe UUS. lfe^igjG 0 ffl®tili!i^|j, 


m 


11 

V (U) Domestic Qamnujroiatitross 
tmaiMDihtlT) A communication nMiHied as a 
domestic o^miirraK^icn will be promptly 
destroyed upon iBonagiilf ini unless OifWtiSft. (an 

Acting DIRNSA) specifically determines mlvirittti®, 
that it meets caiflairm criteria de.g. couroirms 
significant intelligence, evidence off a 

crime), 

(0'HS</rWF)if a domestic communication indicates 
that a target Itaas emtenaasdttt^UUfrtititetl Stetea. NSA 
may estate* th® FBI of that fact. 

(U) Exhibit ffl. 
Section $ 

have att least mm Gsnminiw^^ States) wlHitoe 

promptly destroyed upon recognition unless DIRNSA specifically 
determines in writing that the comirmiiniication may be retained SV 
works vMlWe !RQini£t<C|^BfqpaeecU8CiiKiDCftMHrhAWte»e^ TfffeippGaass&isis 
monitored a® fpsaffl of the ffailiow-uifponn incidents and purges. 




12 

VI. (U) Fewreiign (Dmrmitiium off or Concerning 

USPs 

(a) (U) Retention 

tCr.'Wi) Foreign communications of or concerning 
USPs may be retained omnly if necessary tenth® 
maintenance of technical databases if 
dissemination of such communications with 
reference to ©wdhi UUBFfeiwacLiJfeti toe jpernimittedl Limiter 
subsection p)l. or if the [information is evidenoe of a 
crime fflimtl iis pravadtedi ttoapjiiprtete federal tern 
enforcement austerities. 

(U) Exhibit B, 
Section 6 

was reasonably believed at the into cafltteipairirgB to be a MMihWKfF' 
located ©mamas but is later ateteitminedi to be a USP aura fjPBmmimttt® 
United States will be promptly destroyed upon recognition unless 

DJRNSA Sff^fcal%dteterrriiireffiE iim MWffiljiirigittt^ttUeeanminiQumiffiSiK^^ 
be retained. SV works vwtthTOD Pis to ptrepaue dteataiitf amwaacrejss. This 
process i& rtnraiiriiteedi as part offrieMwii^ artEilfpuo^s. 


n 



K-n 
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ST-11-0009 



Control Objective*' 

Source 

Control! Description 

A&s^sment 

GoodJ 

Adequate 

Needs 

imprwementt 

13 

VI. (b) (U) Dissemination 
fOHR A report based <nn ©nipwimuniicaions of or 
concerning a USP may be disseminated in 
accordance with Section VII or VHI iff toe iDfterntittyyaorf 
the USP is masked OtheiVtise, dissemination off 
intelligence reports based on communications of or 
concerning a USP imray be made ©rmHy to® iraoapsirll 
requiring «ta@ id^%(dfaii^pp*B!ajTi few the 
performance of official (duties ttinat meet certain 
criteria. 

(U) Exhibit B, 
Section $ 

(U/raUeB^ TFh©r®ittofcm m\ aflissaEnmmaltmtm Os not usque to FAA §702 
and is coflisistenl vwtthpponHrttUres required toy Eaamtlw® Order fE.O.) 
12333. 

taKQ 

(b«3ibPJ-. «6-36 


If 


14 

VI. tc n.C ''NF4. Provision of Unmnimiized 
Communications to CIA and FBI 

MSA mop ijjiowimtfes; ttotHTffiGMftaiBicicr (FBI 
unminimized communication® fitoriisradi from 

FAA §702 collteefop 

(U) Exhibit B, 
Section © 



K 



1 

Discussien of FAA §702 Gtolfediionn vwlth(EMfffflii if 1C anatyste 
have tteircmpffiaip® of the data, proofed thTcmfigl+i ©lAnromim or FBI 

dual route. mayatiaciuss ttt®infttFrrrsttcmiwvbtEittitbein i Tffib^y 

may mb prodteaapjies of the information to 1C personnel. This is 
addressed in required! NSAI'CSS Policy 11-t, Information Sharing. 

15 

VII. (U) Otlhar Famei^rti (Samfimumo^IbnB 

(U) Foreign coniiMiiiiiiiiicdHlia^ of or concerning as 
non-USP rnmay be retained, uised aimd dasemiiTmated 
in any tomin in accordance with other applicable 
law, regulation amdipdfevY 

(U) Exhibit n 
Section 1 

(U tF0Hde^r Dissemination Is handled In accordance wth the Foreign 
Intelligence Surveillance Act Amendments AcatcxffaDGffiB. the Minimization 
Procedures Used by the National Seaaumity Agjamcy in Connection vtrth 
Acquisitions ®ff FFameigrm Intelligence Information Pumsuont fa Section TOE 
oi the Foreiigp Iht&ligpircEHg Surveillance Act of 1978 as Amtended DoD 
Regulation 5MTR Procedures Governing tte^dfwtttesof DOD 
Intelligence Components TMMect United Stolte& R^ssaras sirntite 
Classified Annex to Department of Defense Procedures Orator Executive 
Order 12333. 


n 



■ w>r scaiCTrtfmmFtynN 

B-18 
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Conttntl ObjffiEt^ee" 


SOIIIRf^ 


Conttedl Oeseriptton 


Goasdl 


Ad©sp£Et& 


Needs 

Imptrauaatriea'M 


16 


Collaboration wUit Foreign 
Governments 

fa) to: NT , i Procedures for the dissemination of 
evaluated airafl mimirri 2 ^iirftonriaJf.flmi Information 
acquired under FA^pQFrn^ be disseminated to 
a foreign gweimmient, Other than incases tor 
linguistic t%^f®e^fflmi(iDi»®rnn®itt 

(Section Villi! «to>X aU^ewiimalEwii to a foreign 
government (Efl imfemailliion of or concerning a USP 
may be done ®n% itm ai miGainirmr caarrea^feantt wiuitt> 
subsections VI (b) and VII (rows 13saroH 15). 


(U) Exhibit B, 
Section & 


4 6* 44^ Marina 




Procedures toir tedhmical or linguistic 
assistance: Communications that because of their 
technical ®r llirmpiisttic content, may require flurfllneiT 
analysis toy foreign ^enrnrmi^ifite to assist NSA to 
determining their meaning or significance NSA 
may disseminate items containing unminimized 
FAA §702 irnfama^raini to foreign g^erinm®rits leaf 
analysis under ©suttaiiiini nssttiititi mm 


Evnh*it&i and rcwimfestl f 


<b)(3 


-RL. 


"iG tii T" 


i CUr i The iioreDraCTrifortte>hrriicaliliinliiiiiJBJiii£ assistancer 


jDocumentation is developed case by case. Consideration 

snouna oe given todacumentatiioini of this process 


(b)(1) 
(b)(3>-R4 
(b mm 


JSC 3024(») 


(U) MANAGEMENT CONTROLS 


n-w 







































DOC ID:: 427M2® 


ST-ll-MTO 



Coimtrcil Objective*' 

Source 

Control! Description 

AesB^menl 

Good 

Adequate 

Needs 

Imprawementt 


(U) Actiiyiilies must be established to monitor 
performance measures arid indicators. Controls 
should be aimed ait validating th» ptaptetf andt 
integrity of organizational and individual 
performance measures ami irraHE^tems 

(U) Standards 
lor Internal 
Control in the 
Federal 
Government 

l{MfQUQ ) Annual objectives tor compliance vfith 

FAA §702 associated policy , and SOPs have mast toasin 

established (see Recommendation 1). 



1* 

2 

(U) Information ^teuJfeU be recorded sandi 
communicated to management amutl ■BtHnens within 
the entity wttno rmsed ft and m a flomm artoiwrttlftnsa 
time frame that enables them to carry ©tut tttneir 
internal corM arnltattterr reE^f®3TwliJiliilt€K. 

(U) Standards 
tor Internal 
Control in fhie 
Federal 
Government 

((U,'*EOUOi Comparison of actual performance to established attorcteiofe 
for compliance activities associated with FAA §70Satr© (see 

Recommendations 2. 4. 5 and 6) 



ft 

3 

(U) Internal cmM mronitairnr® should assess tfte 
quality of performance over time and ensure trait 
findings an® resctaed It includes regnular 
management and supervisory activities, such as 
(ongoing and neconcliatiions, to 

ensure final cantonfe aesflunsttamti® ptr©|perly. 

(U) Standards 
for Internal 
Control inflie 
Federal 
Government 





(b)(1) 

(&P=P,k, 

(bp)-fiOt 



4 

(U) Access to resources and records should be 
limited tfta aiuilllhioiriiZJa^ Individuals. 

(U) Standards 
for Internal 
Control in the 
Federal 
Government 

1 (U'.TQUO) fro share FAA. itifbowrafttinri with other IIUSAandjipffte 

steps kmbI be taken to ensure that the irndwiittiiiall ftias the proper 
clearance. This iinformationiiE&mDitt addressed in Ifte required fRMptlBS 
training amdJ ®iiGfennffie? issnnaltimitidiUdiisto FRMftwetbpia^&($eee 

Recommendation 11). 



ft. 


86-36 

SG3C 


mr mitHtBrmYUAiFttRht 

B-20 
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(U)) APPEIWDHWC C 

(U)) Fulll Text of ManagsmnBsnrlit RestpormBse 


TOP SEQUEIl'ISWiTlCPr Ol^T 
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mp fiEauEr/mmffroRii 


$T-WUW09 


(U) This pagp intemtionailly left blandfc 


TOP fllCRKr/lffll^JOr O ft tfr 




DOCDD:: 4273H3E3 



SIGNMSS INTEULIGEJfCE 
DIRECTOMffi 


ii 


mem®rantumi 


22Fehunir.y2013 

FROM: SipaJklntell^ire D)hffltt)Mte(SID) 

ffl'N 

SUB): (U//ffltfi^taCResponseto the BfevisedRepitton the OIG A^^ratttof Manqgwrtt 
ControlsOwrFAA 702 (ST-ll-M®. 

(U)Thepuipcwedthis merammlliimis to pro vi&SICfe revised respmeto the subjedtreprottt 
which includes updflesto c otrrec ti’sfe act ioin plans, cr«tterttadjiiiistliiiaitt,saiid technical midnttiketo 
ensareacoiag 

(U | IDreviewdlthe revisedrepenttiiits entirety.. The attacMkespome 
acknmledges SID's agreammltwith dhemrecdiiimfltitMtiotssaitd provifa revised 
ccmt e c tivc actti om p lams- poil« olf otsatact, and targetcoiirapftettiimidates, as needed. 


-L-- 




ie 


coi 


I solidated responseis attached to thismenwiwlum, Please 
S022^66.562!lf^|ji#iU'l la ve any quegkms. 

I--1 I 

I 


Dejjaifls/OihEiFolf Stuff for 
SIGINT Pollgand Corporate Issues (S02) 


(b» (3)^.0,. 


End: a/s 




86-366 


top mcRnrmpmxnmmi 
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mr SEcmEmmwmmw 


ST-n-oom 


TOP 9Bffi l »eT#8H5tfeafBWr J T 


NSAJCSS OFFICE OF INSPECT®** GENERAL 

(U) ®nflOffi(OTni8BE€COBreBHBI«8UV|0(Q)©P8«»RERfiR15cRT: 
Assessment of Managj&nentt Contdte Over FAA §702 

Management? (Respare® to Draft Reputt 

(U) In acconHance with IG-11357-12, "CoorrtlrradiitiiiggDffice dfihre^pssctoGenersI Reports the 
purpcaEof the draft oraradiraSton phase is to garni rrrEnH@ffiitteetlt'$§rp©®ffmratroii3i§apeerTient 
with repcrtfindiirapand recommeimtftetions The SIGINT DtmsHtosatefSID) has been extandteil 
an oppoittunftyto review and commemtton the revised report ttoensure contertiiEfilaccuiirfflsy 

(U) The following matraKindwiilEsSID’s consdlitfelteb'evisiomsBto managsnrartb action plans 
where appHtatttote 


Rec.. 

No. 


Action 


^ S W W F tSID 


with § V 


Aor 




Mana^rranmi Response 


ty> yrauo£ 


recomm endation Thi . 

j are currently prepanng an ELM 


3 


agrees with he 


plan for Target Analysts and 
Adjudicators This plan WiilN Include FAA 
702 'Spebfic training 


(U) poa 

l(W /FWQ) r 

963-0561 


f" 

3 


Itfem. 

SC 


agemefit Re&aOnm: 


Revised 

fU f are 
ppparifi© an ELM plan for target 
analysts and adjudicators The ELM 
plan wilt be broken down into 
proficiency levels thus allowing the 
analysts to register for the correct 
training based on proficiency level as 
stated in the ACE objective. The ELM 
plan for the Targeting wofftetfooe 
readiness standard for FAA § 782 Will be 
complete.y [ | for all NCS 

courses Enforced registration in the 
ELM program amfcltargeting proficiency 
statistics to the individual level as well 
as completion rate of any required FAA 
§702 tracing fWCfl be 

comp eteq_|St u tu ed 

OJT train mg W'llttoeB^toaatiirr_ 


ComqdfetdxiJin 

date 


|(3)-P.JL,8®6386 


Derived Fran: NSA/CSSM 1-52 
Dated: 20070108 
Dectassjffy O m %0^7Q06 | 1 , 


top 
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mt* PJ=OlDjr//e * h J /lV0f^0R :ii 


ST-H-OM® 



wfth Sv 


=a 


(U) SVwithOGC 


41-pi* 1 


Agree 


r-T*" 


ipletion Date : 


Revised POC: 


969-672$ 


D 


tSWNF ji Twiiiwork 

wiiU y l as parrt ostfthe SIP Lean Six 
SigmaT&am PafeRraTtoMi Ihssess 
the feasi billing cuffdeveliniqDh® metrics to 
u&te da targeting trends and 
pT(3fc^di^ttfflea«BiesFina1 
impletTienttettroriv^ilbe depemfenton 
technical capabilities and deployronmtt 
schedules. 


(U) POC; 
|4j//pe#ejT 
961,0561 U 

BeyJaedPj 


«y«aeetir 

1969= 

6729 


(TCW0WNn|~ 

ko 

OveralqHm^aaDiiMoance (SVM 



Agree 


, S6-: 




JWili conwerrneto establish 


techmeal procedtunesssto implements 
recondiiHttconpDoaeess 



f 766- 




fart'MH ©tEXSaMwifiIbotttilat»atatwlth[ 

JandOGC to establish® 


methcwMb^aaralcipioefiSB fotc^pspo t - 
checking] ati£fflEffiniriaatio 0 ©fcff 
sourced material depenutentton the 
volume off atis$$®rniaato n 


EKsair 

2479 l - 


]966 


□ 


wwi) 

{b)P))-ff>lL.8S63®6 

USC 302 


TO P ^F-fciy r - -Stp NOKORICJ 





































































DOGDD: 4273I3B3 


top scene mmmtFtmxt 


ST-mmm 


ST 11-0009 


(U)aav 


(U)Stf 


* L, rth ODOC 


•fflBHaffigSO— 


Agree 


Agree 


-r:l. 


r 


methodology and process for spot- 
checking dissemination of FAA §702- 
sourced materiall. 


fil/rt- ou et Per the requiireimetnitte of 
Recommendation 2, SID/SV wiilF 
incorporate metrics for managements 
assessment 


\ \ 




v\ 


IS 


U) POC: 
l|/ tf~OUO fr 
2479 


8^60966- 


; U,weO®fSIO®V Ureas ftu% 
implemented the super auudl fl poKces® 
for FAA 702 SID reapasdts ctasuure off 
the sutopstt reconn imw i iB ation. 


<U) POC: _ 
iW/ H3UOT 
2479 


( S fr'mE) The following activities are 
current^ in progress 


sid/svJT 


3 f e 

rupaaUng s 


iteili. 


developing and updating a 
single SOP for oversight!,, 
adjudication and targeting FAA 
?a3faflg<isflfi and fra inina 

leurrantity potpiuiaSlng p£A I 02 

documentatioi 


ao 


l£L_ 

ra „ ipr 


■ill work 


ft 

> 


onao/ss tne process ana 

progress 

• SV will collaborate with S2 and 
fr" I to oip ange the "go FAA" 
gcrf fcll: J^ AA web pages 

IKSSSh- tm- 

5597 

Hwtimi Ma»i 9 S i«m»rittfltaagD(ai»a: 

(U/ *0 ' J0 1 Add bullet #4: Guidance 
changes that require updates to NCS 

(within the CRSK senes) mii\ be 


Request 

Closure 


n 

(bj|3)-p.i_ mm 


TOP 1 QDQIMiL'F ; 70B!; i lierQRfl" - 
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TOP M€MfP; > &i? ■ 


ST-110009 


(b)(3)~P.L. 86-3S 


requested w a a New keammQ Solution 
In such case I I viU be the 

ommi m upon c oordination W\m SV In 
addflaro [ I (see t(©mitmTmiitteton 

1) will manage (dtnGai®^(toTafflj§ehgg 
wwctece i ffiB aJm ttse^ri dfthfcadd 
ELM \ramm§ p Jan 





3** 


(b)(3)-p.L. 86-36 


(y)^gZD 


Agree 


(JUMP©**©) Phase 1: Requlremnents 
Gattering: 

• GoQductfiechn 


deveite^© 
Direct 


tech nical B^chanae 
wrtttfi l | 


yr 



rncli 

the i 
requjiiir©imfirtfe& 

« Doduirmn©Tt r r e©o®rimnT0«deiatD3^ 

for sflssdfic areas wttoe 
autoOTtettiOTivwli I i mrippcGree 
process ^ftoeio^y. 

• Update nee 

steeriirmg c^mippocinaa womfibo n 
reqiui merrvB9itteaadd existing 
gap® 

fU#fl9l^1Phas® 1 Dellusrakfete: 

Report docuiiMWTtbfwegve ew^ad d 
technical! ©xdmGornDgpss with b:Jl This will 
Include an implIeminaaTifeaibixin^^ 



III] Target Cornell 


£|jpn: 


Phase 2: Planning Phass: 

Per the devetofprrnnsrttaralcl 
. rnplietiMKetm^fl tsm .cceeea^^aicEfe^iailiai e 

of work rre^n^ttiDlrmi^MS^atdonaa&on 
of the purge ac^pict 1 (Ka*itooraadi^K@eia 1 ii<bon 
processes 


(U Ifimm Ww aftf^te MMwblg^ 

Coor din ate wwtUn | [ to dociijiinwt sa 

schedu'leWmwiine wlith spec ific 
complete tester eepi mdi tt t (fiittanffie 
this cap^i% per the ImplementaSw 
plan 


top memmmmmmw 


TOP $E CREIW8h$*iI$F ORN 
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ST-nmam 



iop lECRj-ETj ' oiy i fQ i fimy 


ST-11-0M® 


Develkn^miffl^^ 

Work w itt fc :ll to develop the new 
capability per Phase 1 and 2, 

(W//#ewe} Phase 3 

Complete the development and jproviidle 

a final report to OIG defining results 




( WOUO) StD requests closure of the 
recommendations Deliveiratalte 
Update: Ifflrs? SID Data Manage* (tarn 
pnoNHtite dociiinroaitSStion to enatolte 
cteut© of this recaMitmffin&aiban. 


TOP OCQRBn//^ 1 MPCOreMM* 


top 
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4273I3S3 




ST-U-0009 


RevUurt POC: 

{y/#ea©a" 

a§S?gi729 &1 


J 363-3004 


{b)(3 )-PJL 


O’ 


163636 


fUtSub4ulkt*t#1 : 

P er ONI OTR guidelines, tide 
requirements of sub-bullet #H are 


completed 


ij&i 


J The analyst must assess traffic 


ana respo nd! ftp tree suflzp^rrnt 
questions. | [ 


10 




i 


<UI SuMauiet #2: _ 

(s'j6W N Q Th t| 1 

o roan iz<ffltBnnBB are najinniBiiliLiy a lop- trw 


(b)P)HP- - B$K36 


(U) POC: 

(UKtfw^r 

9ea-05®n 


Revised eOCl 


_ 

p /ro w)i 

6729 


11 


ADET 1 


IJJ/fSBffi Sub-Met 1 6 2; 

Si d b efenred to $V SV will woirlk 
wirth ADET to update the following 
(course;; F HS^ >»iiTm©iraHTra9T^ ) 

Section 702 (OVSC1203)) to neflltedt 
modified Targeting and Mn'niriisaiftQiin 
Procedures that are currently pendtrug 
the Foreign Intelligence Surveillance 
Court ruing 

. H UjBtM B j lfiub-bullet 3: SI Bkx/^ lll 
(bff3))-IP. IL .88 §pfcfsh training slides onto the S2 FAA 
702 Targeting Review Gd dame® 
wetopage andt w 11 work w \m ADET to 
develop a course to repllace bnehngs 
and informal training sessions 


C 


(U) POC: 
pf FOUOH 


tb^^lL^se 

(b)P)h50 USC 302 


TOP SBSPafiTOTO 


-MamBpnaiiiMiMvs*- 
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fffiii P «sawMf 


ST-11-000© 


ST-11-0009 




HJ6M3)-R-L. 86 




36 


] 963-1109 atw£ 


SV, 966-2479 
Beviiggfl Maircasaar^ Refoasmse, 


(U/ JTOUQ) QVSC HM1: SV wil work 
with ADETto FAA §702 

(OVSC1203) coy irse to mefflledttthffl 
amended Targeting and iMIiiniiriTOMimni 
Procedures that the Fotreigim IhMigeircoe 
Surveillance Court a p roved in 
September 2012,. SID l I will publish 

tFa litapg • s Htttes onto fte SS Wfflk ptES 
Targeting Review Guidance wettpage 
and work with ADET touifiasteate (SWffiC 


(U//i«P®b#e^eRSK 1304 & 1305: 
Updates to FAA §702 PtnadiEail 
Applications (CRSIK H3SD4I)) anraH F m 
§702 Targeting Adjiudotfcirm ((OT5H& 

1305) were completed in Deeanntar 
2012, In addition, enforced registration 
in the ELM program annoH tba^gstthig] 
proficiency statistics to the indiiwiatall 
lewdi as well as completer! r ate of any 


f70 S tr a fi i jflg (N$S 



TOP flBORMW 91/ f HO TORN 


wmmmmmmmm 


























DOC I©: 


427JH333 

— TOP SEC RE T/MWOFORN 


(U) This intentiaxraatilly left blannlfc. 
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DOCHQ:: 4273417* 



NATIONAL SECURITY AGENCY/CENTRAL SECURITY SERVICE 



(U//POUG} lmplem®rttatam of 
§215 of the USA PAmmBMAfcetiadd 
§702 of the FISA Ameniuttmaitte Atott of 2008 

ST-14MKKQ2 
20 February 2Dr66 


(U) This report might mattUsere&eaabMeuaddethdtErEadederofdfrffltniaftintnoAcAct or otherstaMtEteBiah&gegadfltisjis. 
Consult tHre NS A/CSS Dmspeeitoan GMemll Gftieffof Staff Itaafnee releasing or posting all or part of this negmrlt. 


(b)(^ sfi. 86-3® 



Derived From: NSAFCSS Manual 11-52 
Dated: 30 September 2013 
Declassify 


t&p s£€&E9mmMfmm 

Epppnmvgfci for Rellease by NSA on 02-11-2016. FQi&(g&EBa5 # 80120 fMgialiinnn t 
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TOPS; CR ET IN MflffUR T 


(U) OFFICE OF THE INSff&CTtffR GENBHMPLL 


(U) Chartered! by the NSA Director and by statute, the Office ofttte Inspector General) conduct® audits, 
investigation®. inspectora®, and special studies.. Its mission is to ensure the integrity,, effitifency,, and 
effeetikeresss oflW&A operation®. provide intdffigeaKEe oversight, protect against fraud, waste, and 
mismain^anrant of resows® by the Agantjy and ii® aiffltiates. anti snsstrec ttiiat aaiivitcss ccxrmpj^y withh the 
law. The OIG ^isosservssiaamirjoibhddaaaatuuisaaststiyiglSv^A/CSS employes®, eikifflkn ami military. 


(U) AUDimSB 

(U) The audit function probities imfeipandtett aassessmmsts ofppogjaasBS and organization®. Performanroe aailfes 
evaluate tine elfffs^waJiusssatridt^Tfiiisoayy of entities anti pntagrearas renald tHtarr iiiturreti] canttitoWs, Financial autitts 
deternminia'thee aacuraayy of the Agency"* ifmanritdl statement®. All audiit® are condueMti in accordant with 
standamtis estelbllMuiti HsyytH® GSwpptardUciGoeatala 1 ofttte United States. 


(U) INW$nG3VTKD«BS 

(U) TUte OIG administer* ai system ffrnrecebi ing gcooippfermt sf i (irloUitiiriuuanqpy menu si pip solatia uf i -fiiaolidwusaet caiahd 
misimaraiggnmaitt. Investigation® may be undertake® in respomse to those complaint®, at the request of 
managements sostHse rcssiltlt of irregularities that surface during inspection® amti audits, or at the initiative of the 
Inspector (Sknarafcl. 


(U)) INmULGEEKDEE OVERSKEHHIT 

(U) Intelligence cawsEg^htiasldsiggeid to ensure that Agency iinfedl%eii©e fiftmatioascraorpliylyvitiitifcifealel'allci^aw, 
exacutlikc (onferes, canti I1M3D canti IWSA fpd ltd ires. The IOmissionn isgroumdtal in Exeantike Order 12333, mllnidh 
estabMoss fetnaal |pi™i^|lkssiU(tidCTvlwtifch IC compomett® rmustaacooip(jUlslulthtrimmassions. 


(U)) FIELD INSIPIBCTTGNftS 

(U) Inspection® arrecogaaraeatioslal reviews inait tetsesss tbbe (g'ffccrivonessaaddcfti’fiicitaTjcy of Agency arnnppannriris. 
TheffiBlttl Itei^iflBnHsIBiiamonafeboppadeEa'sw^hlilriippeomrGGiHrel'a] oftthe Service CrypoDegik fflfameentsaadd 
other IC entities to joim%ih$|^tcinn$£di<Mteddccyppihlgipcf&i4iiies;s. 


T fi jarsacROjpj/M i jrqjRit 
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20 Fefommatty 25)1)5 
IG-111M 
Re-lssmffld 

TO: DISTMlMimm’ 

SUBJECT:: ((UIMMIM5))FftpwrrttxratIthdthpjrieieinntabimn of §215 of the USA PATtMEBlT4fottaamld 
§702 of the FISA ArnamlinmtfcsAtott of 2008 (ST-14-0002)) 

1. (U/ /FOUQ)) Attedtatl fldfea^fthaHtfea-eppcfll on lmplememtmtmm of §215 oftiha USA 
PATRIOT M&DantllfFM of the FISA AmendmmttsiJktt ofZHfM, as reqi!iKSitali% ; tmembers oftthe 
Senate ComnihtaxniUttediuiMciaay). 

2. (U) In $epttanfer23ffi^ of the Senate (Dunmiittee on the Juidkiiaif 

requested! as(Bnngreitaeissi'ee j mridppeiidehtereKi«\v ofttt® implemented^ of §215 of the USA 
Patriot Act amll $7102 of the Foreign Itatdll^m)^\^u^eMarieiA4ctlffSSAAAmBlidaiaEilA Act 
(FAA) of2&085 (FAA §702j) tfeir(cdbntiaryeaaEslSO IDGtlthFOg£l£QC33 .1 ridalmir^r$(BQtl4, NSA’s 
Office of the lmspedten‘^iiBrdl((100[}>aridstaiffrnamhtisrs of the Senate Cfsmnriitteeoaantltilae 
Judiciary ajgjiemll amtheessexiEipe of a review ttte (DUE wtuddldcouridiaCt on NSA B ss use of both 
authorities. 

3. (U) The ffljfflfcmiiigiffitiise NSA OIG^ssiBgmftt on both vrthidhvwillbbeseotitdo 

the ten maniierFS of the Senate Cctamniittee of the Jodikiiaiiy wdho rBcpn®3fifcdlt hha-eeidewtltfee 
Chairmann antd lfhnlkngzNPl£cnbber of the Hostse Clsimnitttee on the Judiciany „ ttte CHtiifrmanamald 
Vice Chaimnani of the Senate Sdbitt(Eonmitteee on Intelligence* anil dtetQljarmaamarittt^akkigg 
Member of the Horae JftamrraiBteSB&teetCE^ 

4. (U/tftSTO)))>Wff apjjnmd ifttettteeccmppeatitiomaddeoictetfleiesxtetaiafed) Lou® ipeparaoelie 1 
throughout tftenstwbsw. 





(U) This rafNmtt might watt toe tedfeasahfcde under the Fiwadhnm of IntSMinuttawnA'Ct or other 
stattittes and regulation] s. Consult tHreTlJSM(£MSTIiHppetat d CjGunataCI 1CIH1 ef of Staff before 
releasing or posting trill or partt of this nagintt. 
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i. (ui ihnnfffizimfrrrnxGiN 


(U) Reasotm for Review 


(U) In Septemifaar 2M%, tem mranttes of the SannteGomnritte&ee on the JOuihidiff^y mqpiEStaddaa 
compadhaiBwc, jhdi^tBldQtitre'ckmv of the iiiwpJbmBntimitdtfin of §2J 5 of the TOSAFM'REKDTMct 
and §702 ofttite Foreign IrtdlbsaiiEC Su^wllimuecMctf H&A AAmirikniitsit AcAtfFfE^A ) of22BQS 
for caifeaitftaryyaffi'fiQIfl ftfthntgigllQlOl 3. 

(U) Objeffittvess 


(U) In January 2O14,tteNdaibnnhlSScantjt>\^ttjy«!^ffiaiaIra8eS!ndt^ri$yrSkEJjc(^S^0tfJc©ffice of 
the Inr^paatmGEneBeilak ^XKI©>iad£6’i(ifuininntee staff agreed that the NSAflHlEweolddreeiaew NSA'ss 
impIcdffiKntMtiwin oftfanth autfwnMks fw<Mfecidiaiya , aaa2(HB1.3. The study has ttaaBsa%edtvees: 

(U) Objedtihtffi 1 

• (U) iDteSirttke lhawclJitito waascotiBetEtdd .storetid aaidylwxtd diiReJomittiatlcdaiialitfetntuciati ed 
under ttiKppo 0 eddtBs;sf(fDr§p 55 andd FAA §702 authorities in dffeot in 2®li3 anndtHK: 
steps ttdkuntdio protect US.prRiari intformaiiiM.1. 

• (U) Desctitee ttJiieiiasitfutt<b®Hs on using the datteaaiitl how the Bieatiialtoiss Haemibenn 
implemented„ iindLixIing ttidisecipprion of the 4atarep)0)Okid)oiriesaaddthha.'OOtJt]'b.l sfdbr 
accessing data. 

• (U) iDtesotike aMareigtht £maticomppttM^et(aa%tii4B?pfiifofiffifmfcl)}b^t0te3tiiaineli'id>st&teatia] 
organgizariimiB iinsstppurt of §215 Foreign Intelligence Somsiiltarcec (GanttFE3SC) 
Ordats aitdFPy^^BSiiiiiiiniakattioiprpmdodmes. 

(U) Objective II 

• (U) Oimrrttee iimiiteots of non- compliance with §§2155 BMTCBada'arahd FAA §702 
CertMottiaares aitdvri^iiMNSSAidsaiodieiic to minlmitac nemiTBmec, 

(U) Qbjeettike HI 

• (U) Describe how analysts MsodtlteckJaia to suppowtr illsdiiiiiitettliigoneci'aTOstnQns. 

(U/rMUlfift) Oursttu% oflWS&'ss implennomtaitim of §215 ami FAA §702 authorities was (based 
largely on program sta&dhsititer ihttowswss aarictiretetews of policies and jpmediuees £iaia)d:)dtfaer 
program docummamattoi]. For this ne\uinA\'ttobd^SA)DKi(dnmieneaicdidm)oat}lsobiplt|idKemedtad to 
address ttftereqqimmBiflsts of each authority; ;Himweci,\ we did Mtx^ilJ^Hlri'ogilghet'astiigigv'hehasthcr 
the ©aittiaifcs waiKcxppMdlvggaadd^dbd'ddijopipJigipransialaribdktdLicrs. 
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II. {U) SECTION 215 OF THE USA PATRKQHT ACT 


(U) Bacllsgpiocurrdd 


(U)) ffiuunessRAecdsrcBrc 0 rder 


Mj») . . 

{b)?3')-P.L. 86-36 

U§61824$ 


(U) Since May tflrefloreeggn Ihiet(ilggooecSSiu r etjltlaocc06QttrtRf3(SCl)ahas 
authorized the Nlatramdl Security Agency/CentanaD Seomitfy Senikaiistll^SaA )bbUtk 
collection program under tine "’Hntimess itmrdi^ppTOfstemn of the ffinmgnilfaiffiifflggnnee 
Surveillance Act (FISA), 50U.S.C. §1861, as amended %§|£2Lffi oftlte USA 
PATRIOT Act, legnsflatiam (onanteil l%thhcUJB S .GBnggees s cimolds ^jundd i htKto ltew thyttfee 
President. Ffmmiitit ilfstsilabthoriaatin rinihlhfay 2006 through Dtoanlten^O H4, tHte 
program has been agpawiasti 40 times under BustoEss Rerancfe (i[S^ )OOWdoi'sskBictd by 
18 FlSCjjj.t%ss. 

tTSNSO' i WfTi) PurysaattiMbe series bf BR Orders it-saitad toy ttfte FRf&C, NtfiA\ riOTves 
certain <£8lldfeteiIr<reectfdSdior BR metatea)) fiw llZ> A ).&.tttleemtmiiiMikaliamss 
provider. NSA nelffflffi to the sorikxs of BR Orders apptra'xsdl toy fcIHBiCaaShhd'BRR 
Order 1 " and the ©suttnll famaxwErik NSA has irmfibanisrrtffiti atstHK"fflRFBa4pi|3agigiinifi 


(U) The IS^fiBrtorreqigiikesthhatiproMtlhrrs iprathcec to NSA certain iinffermation about 
telephone calls, uMiinii£itod% ttih®s£ minfcuxvdthinlthliJ hltiatfccB&tateanalidxiteteeremlttoe 
United States and foreign countries. This iirtfeimatum iislliniiedd to BR metadata, 
which includes information concentring ttdkgftonK! qraMbber si mb d to make and remiwc 
calls, xsttem threciatlistoohlpljahKcairditiolTO ferign {hdcaballaslatiddubdbds) ostnkmtludhidc 
infonrattikm atom tHeeccirateon t of calls, tfe mantes of the participants, oraslllsitiee 
location inffirmaaitonn (CSLU. 


(U) The IHRIHESA jenagram waBsdto«4d)ppdd to assist the U.S. government in detecting 
commumiottmaiK fcnws&m knowm or suspected tOTMiiafcswriao areajprattiijig cmt$>j<ttc tlte 
United States anril amiimiuriiaatragg wittoltitltterinkideldieiMiiilmt<Sia£iatm, weliwd l as 
communieatikaiK IteswenuippeaaMeeswitiltto thee Uniitted States.. TlteffiRGSldder 
authorizes NSA anodlptts to query BR metadata oorilyffiiJiiddntifitiddcooutadEDatmsraiii 
purposes. THeeHRR FISA program includes ©versight mechanjsms to maintain 
compliance with tfeHBR Order aand exteraidl rEsfpirttngg lta^uimBoms to the FlSC tantl 
Congress.. 

(U) BR nemewudl process 

(U) Appeosainutul^ a^^lQQtldyysthkhOQcpartenieru of Justice (DoJ) on behalf of the 
Federal EBire^iotill^ NSA lilies an appioriism «MitHreIf$£r 

requesting that ©attrimiyjariddcrscointitinnac to provide calling records to NSA ffiar 
another 90 days. If the FISC igpravess tHK^wnnmotit’stiiaplijdtaR&itHis to renew tte: 
pregnant, the Court it-sanas aa'' ibpiMnayy OTddcI' ’ddriheiakig gltiiscspap c ofwHiat the 
providens must flumiidii to NSA amfitHreppcmdskmsftoiir NSA ,: ss handling ofBBR 
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metadata. The FISC issues “secondary aitfeEfT sqpnatedly to each provider, dlmating; 
them to deliver am cd bat trance coppjof certain calling lnaxcmikto NS A daily until the 
expiration of the BR Oirefcir. 

(U| Metrttcdtdfagyy and Scope 


((bO(3)-P,L, ®6-3B6 


(U) Our review oftlte BR FISA program omittnll fraimnwcnik incidents of 
non-compliance, and NSA’s use oftHcciuaJihaitilijy to support its counterterrorism (CT) 
mission was based largely on BR program stakeholder iinteKvostrcsand reviews of 
policies and procedures and other program dbammimaatkin. For this iramw„we did 
not verify t ttnmgihtteSihgg\vhhdttberhb<£cotitrlsl were operating aBscttesrrfcWdby BR 
program ssnfedteJtoss. However, we tested aanttnJlsoftBte BR program chirring 
previous NSA Office ofttkc Iht^Esttar(SkiraM (OIG) reviews (see the Oversight 
section for a list of those reviews), 

(U)'Our sttadfylfficused on tbe irnoagEss aasand controls imiritoreim2ZDB3. We used B R 
Order 13-158, ap proved "by'ttivFISCl l I 

[ and compared rtteitegiihsnasitSs]ibtdddriiillbaOl^ewfditlhe 
processes and controls NSA used to maintain aamipilfmcee wiiih tttatt QDidEr.In 
addition,, we documented due dhamgas*, implemented in tbe BR FISA program 
following ttUrre fftioiiitanfs directives in 2014. 

(U) Presidential dlrecthwsafflaatn^qptetying controls In 2014 

(U) On 17 January and 27 March 2014, the President of the United Suites dliiaat tell 
that NSA implement tthEffidltowr^gcbhnggedo the BR FISA program: 

1. (U/J FOUO ) Submit selection ttemssto the FISC for reasonable aaticuiyrfMe 
suspicion (RAS) approval {fesaeQuerying section for RAS discussion)). Before 
17 January Ml 14), KAS sidlsntmn ttenms \wske appnoftVEdl by the Chief or Deputy 
Chief ofWHi&’s Homeland ScoauTi ty AtraUssaras Ontter (S214)) or one of the 
twenty s^piei^lfyaathfeidaxtcH (Hooteldn dl iMissi dffio ifidbratijistqH MB&)KasJthes 
BR Order nasqurnfri and NSA’s Office of General Counsel (OGC) paiifrimnil 
First Amendment imviavss fdoEsfeden do n drama a ssQoiataddvhlithJ IS. Spcpam© n s 
(USPs). 

2. (U/ 1TQUQ) Restrict conttadt chairnnirag to two hops fi : om seed selection tterms 
(see Querying setetran fimGrartterttdlBamnjgd cfcisGE&isioit) . BBftfare 

17 January 2ID144,tltbd3R Order autihDtkKtlapppirppataly trained and 
authorized NSA analysts to query to three hops; however, NSA guidance 
restricted tHraseanahfystso query BR FISA inqtmiitorasstwo hops from seed 
selection ttemssand one additional bop (three bops from seed selection terms) 
with Airalljsiisand Productim ((^)inraBagrateiititappprecilal. 

3. (U) Store BR metadata in provider amntnJltdlrcppetthriassand not in NSA 
repositories. Once implemented, NSA will submit FISC-approved RAS 
selection ttermsto providers fforthem to query tthairrrppsNitridies.Providers 
will provide to NSA only the results odfthose queries. 
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(U/ /FOUQ)) N$A impkamauteti tHee f&BSt ttm® diiwikes %Heftoitiaayy 2M 44. The diiitti 
diramee. ‘Staling BR metadi^iiiippa^iddcffep^odildckaiHiidbiiiiitimpngntjtii^odiogaetiyici'y 
resunlltts ffanm ipravdldefr^wviH 1 l aq^iriei^cfiigi-asKieEikina^firppoi va! of a rntswsMffltntcfrftr itltbc 
pro4«£rtkni of buslines imatlis, wHiuhh had not been imydbanBritedd bbhfinrahtih i&pept) rt 
wasiisaited. 

(U/TF OUO - ) TiscffdlhwiiiggsscoDonsddssdbibc how the BR FISA program ©rntteil 
fraffinkmtffkkconip|)iiewffhth BR Order 13-158 (indtoutimg tlteatiaaegcsiiiplplneifiitadcd 
follomimg iteffieesidntit's diraettiMexs iin 2QBI4), tH$e2Mi I 3 BR FISA pragatmnnmdkhmts of 
non-ofiairpllawec, aadd NSA's use of the BR FISA authonirty. 

(U> BR FISA Program Contrail Framwartik 


(U//fRQli®T The BR FISA program cextmtoblV&nnwiwb rldedeatetodsoho w NSA coUeag, 
samples.sst«jres, accesses flquoBs;sJidisHwmuttstciaclajfifctiii^ains BR metaafatflaatldlihc 
ovaiagtfttnmctahaBiHBis to comply wMittisc BR Order.. TTIms seccfcMJi^LEmmnriirizes the 
provisMiTK of the BR ChdaniMdllhero^^ ] nupiptaptHtf c&rfo r each phase of the BR 
FISA jpTffithflCiboncgylde. 


(U>)CettfR&jWon (bM3H».JL.aS63S6 

(U) Previsions rf iR ©Fd@F 13-W <b)@K» USC 3024# 


(TEiSSll BQ T he BtfldOrde^jreq uBbefi p] | tLS. S. telec®irnriMiinatiti»s pnmlteGsto 

proffe r i atl(itoamsDmiiceiO)py of certain caill detail] reeendis(hhoririndriScr refenrefitto 
as “BR metaitetEf)')- The BR Order deftness BR metatota avsartrnppebhasiswc 
cominittimi^t(Mnssr®utiriggiriftihna[tai)iniiinbloitidgjibiJtimiotilitnliiiailted to sessionialderityyigg 
infisminatton (begt, .origgiattitigi janditbtminnating 1 1 tptaptao iiui m b m bint e in tidomt l oMd b Mo b i 1 c 
Subseriiterr Manitw (IMSD)) nunnibbc raiati dihrteatMmdi aMMxiilbi Rtafitati d£q lEpmpnm cm 
Ideral% (HMIElI)}numhbqc),titrate kiddctifiScrjelejdjrirancaffitigiigacdudamhebcaadaiiyidime 
and cdiimtiuni of call.' BR metadattadheeainofculoliedthdmibaiastQnei varmentent of 
comimnniiaaiarMS iftthflanapieddiidspssf findiittulcialfdirfianiaiation of a saib&urifeer or 
custoianrar; or CSL1, 

(U) Data received flfaom pproiddess 

. .tE UW tM W p T 

<b Mh --- f 

<b)(3)-P.L. 86-36 

(b)(3)-S» USC 3024(iJ ■=-=- 1 


1 (U) The IMEI number is a type of metadata related to mobile telephony. It is permmmilttyembeddMin a mobile 
teleptanehandsst by the manufacturer and generality is not cham^EdiMeby the user. In most instances the IMEI 
does not travel with the SubsmiterldeMiity Mod* (SIMs card in contrast to the IMSI number which does. The 
IMSI number is another type ofmnetadata relsietll to mobile telephony. It is a IS-digit number used to identify a 
customer. IMSI numbers are permmsntly stored on SIM cards, aUtowng a user to plug a card into any mobile 
telqptameand be billed correciiKy. Calling card numbers are numbers used for billing telephone calls. Acalling card 
numbermay be a telephone number as the phrase is commonly undemtertland used, plus a personal identiikation 
number or may be another unique set of numbers not inclMiing a telephonic number. 
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2 (Ut fritfflO) A SCIF is an accredtaH area, room, or installation, liicruppawatig^hysicd control nweaauie'te.g., 

bankn$, tails;, alarm system, armed guards), itxwhida no person has auttmiiwii a eceEsainldsss pipi®vedi'tb recmc 
the parnttiinillur(cubgppyyof sensitive ccwrpnttnratBdliirihrmatitikiuiadchas a need to know the semsStfoae 
cctmpifltiniBiiMtlinroitiniittoniactivii^' cooddatflddhdieHtin. (b)( 3 y-P-.lk-.§& 3 &> 

3 (W/fOUO) | | Aoetesllact chaim 

shows that seleofenterm A coramnuribaacdd with selectHm term B, then first and last contact date itril^jUronytype. 
and the total number of commumaitiiisrtB lhfltvaffins'al^dtaoitenrans, A and B. 


G 


(C/. ' TLCL TO USA. FVEYf 
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(bM1» 

(bM3H*.iL.aaBS3B6 
(b)(3j)-SKMJSC 3024(a)) 
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WM1) 

(b)(3)-l®lL .886386 
(tbK'3 )-55 0 USC 3024(i) 


4TS//Sl/)!l l [r7f Figure ! 1 i ifltartactdfest ItihiBR metadata dtol^ikw/fftxmiithe provider to NSA 
and the varirouus BR mataibtta reppskitrirka nifiO 13.. 


ffSHMtfNff}) Figures 1. BR IMet&d&te [Efed^ltbaNiAaiaKzh fit^fsqsctsrtesie s 
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-(T^WUlMFj. 


V 


(TOMWaMn 


iiM~Qrder requires thatf 


metadata 


Sproviie ail BR 


Jfor comnawinniinittoms fcbeteeean 


the United 3 altos and abroad or wtol% \wftjurt i(iheLIdilhd(El^ta^3piApiHarign^)<±dcal 
telejalmne oaMsis. The BR Order does not require| 


I 


t»))(3)-P.L. 86-3(6 
(bjp)k5® Use 302i4(i} 
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tbH1| 

WM3)-P.L. 
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fraz/aww) 


(UO/VMebSadafanJ^mpling 

(U) Samplirrggtdcvara!yh I BBffriBiatt»tatait«^«$/ity 



§m 



sj)j£am£T 


NNNNNNNN 


II II 11 


the BR FIS A program. DIA ntesptsairsflcHIitss iindlufe: 


has | nJ 'I ful 1-time employees tl&l'icaied to 


H 


6 (U /nOWOt The BR FISA Auttaniity Lead is responsible to the NSA Director and the Director of the Signals 
IiattdliiguitccDirectcwattE for implemeatfltonof FISC BR authoiriizatioms by the NSA organizations respomsble for the 
collection, processing and anallyas offfiK metanfetta under Ute BR Order. 


.L. 86-36 

L 86-36 
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(U UTOUOl ) Verifying that BR metadata is correctly iingsstdij,i$>c0eesed4^nd 
formattffidi into chains; 


(U/£@y§. } i 


/(£? /KlUl -1 * 
i-nb - ,• } 

miiuitrr#" 




{(WPHPX. 8®~3® 


(lb)(-3)4P>.U 86*3® * (WB 


ww 


(6)*CtyP.L 86*3® 


wuuiiiiuqcccqn WHP*'J 


(92SMJ M Wj. )N S A has two types of contrails to monitor dfetaanjecei Yddfrom the 
pro.vwijfers amri. mainram compMamsp with the BIRGDtider .Ihe,,:firiiH,sL...----... ,.,....|..J 


ksIpWs’ 

by tlie DIAs using dttfa sampling 


(b)Xf?)HP LL .886306 


es. jjghe second_is_a 
sampling Techniques | 


jpet'form ed 



team runs tests to veiiify that|_phases have been irppiietEicnted and phpvvddssthe 

test results to the DIA team to validate rthutthe changes taave been made. 


(UZ /flOBJO)) Sarrpilhsg DIAsftHnf. 


r-"ii 

lie st 


]tlheHes on the BRiMtadatfe to 


answer five tpesttimiBs aa^jphrtof tlie sampling process G£Hlttdl£)(Qferiiy Grinpli&qsree 

with the .... 


7 tWfflMji The sMsrd ternist i§[ 


1®)(3)HP.-L 86-3® 


7 
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1. (TS//Qi#W) Did the BR metadata contain credit card numbers? 

2. (U/ /fOUO) Did NSA detect CSLI in Khe [. ,~l 

Ms® 


3. 

4. 

5. 


(U) Did the BR metadata nmmilstturntuce adhere to e'^ppaacfati cmtbs?? 
(U) Did the BR metadata lnaairnil(smittentadltoite'tfo expectations? 

I 


(U/ TOUO) Did 


(here to expectation!®?? 


mv 


ii 


h- 

(Wppmijfsc 



mm 

(b)K(3)-P.L. 86-36 


(U) The sampling m^lEsamosautbmitCdlto NSA’s Gffiffics; of the E^itotttorof 
Compliance ( GSMStQ )i inweslftjy BBEFFISA compliance uajportts, ©DOC compiles the 
informatM Wittimtharoinn^latitteei'apprlBtand provides it to the Director of 
Compliance ffrmtatrmw. The BR FISA Authority ILEuiisumiimaiieesthe weekly BR 
FISA compliance ittpottetforttkeDB J National Secutit.y’IISKusitoils (NSD) review 
before quarterly amnqi 1 kntsce nreid wAnintttotgig^sfcseSGbrsrglglitc suo ti <t).n). 


E 


(TESSteW^J Fj Credit aard nunttgre 


DMssamnk thd 


me 

3 


I 


3fe 

3©d4fi) 


_known to have eanttainail 

<^c4i| pard Sliubcps pscjd assart Sfcalpig card personbl idppjfiifipatiofl nmp fesTh s 
BR Otte dees not authorize NSA tQ Mceive eijstromer flnan ereJl fflfemM won r V 
|l | DIAs samite alilBRRintatladatnecetds ffbr t N t hat could 

contain credit card numbers. The sampling of BR m etadata is performed! to identify 

Ito scr een for credit card numbers, 
lare identified. DIAs tbgtt t 



mtmm± r 


I 


card numbers and forward t them to 





....f. ..ii....... 


lPIAs identify them as credit 

As cA emninio ewfattMietlth e icmWi C aalxl 

ibfci-RL. 86=36 


(TGIiSIf/AC) To demonstrate rttemuntberof files and BR metadata mBS odtettottare 
sampled dfeillytfoTanKiditaai'iiis,ttheOIG randomly ssdtgtttd l! | for review 

(Table 2). 
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m) 

(b)(ffl»PJL. 86-36 
(b}P^®B USC 3024<ii)} 


m 

<b)t3))H>lL.«063B6 

u§e mm 


(bM^HPiL- 88636 


TOtF SEOmTFgBiy^OCMDHN 
(U) Table 2 {osanfe ahipljpg Mfetoiks for Credit (Cartes 



SfcWp|Blin& Mimics for Credit Carte; 



(TSl'| S R^Si//NF) Record Srtftoicture Ttffee Dffi&sssinjDjlxteBR metadate 
each feed to test whether the BR fflfeteld&a fetfidrd structume has dfran 


[ 
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(bin)) 

(bp)HPLL.Sft6386 
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. 

tbi<*rpPJL. 86-36 


71 If ainy tests show (ffliHffemncass. awanihg; inusssgge nsigonatatoh tfartHecUDMs 
“to address.. Clhaigess in BR metadate record atmiaturc aiffiwarjyraaeebbut, if identified, 
the pwraslsrissocoitaaotdd to determinne wtalterdteecbhaggasipperranamflntoioa ansttirtiene 
processimg anomaily.. 

(U/fTOUe) BR met adata msiaoTU caantant DlAarBOTb^tfetBERoaakMataratajaid'd 
content for aadh feed! I 

J* -According- to tthe BteAs; @(Kjitaptions are vqry irare: i&)(3)>ff > ,L 86-3(5 

»! testdi for ifk metadata 


(U/ fFOUO) Table 4 shows the pereemtage ifethe 
record structure aMuanteralit (hiring 2013 , 

(UIWW) Table 4rdS—isamBpl ing for BR Metadata Record 

-— cStructtUiee andCamtteittTEedtigg 

(fTOitfSWMF) 


(» 

(b)PpoiL.8663S6 
(bpKSC USC 3024tfiil 


- fTOf i ClHWT) 


fTO/ZSllWIlH Data ffest# wrii uma DIAs jmoiritcrddma Ifc e® Yodtenas jj [ for 
anomalies by reviewiigig tflac l | IStatus iR tmottl" 1 wttiidh lists flarr 

each fed iae nikmb iBr.of.i raw'BKffl]^^ Irecdhmd and the 

tatt d5 l 


(U Pmee) Table 5 



te irumtterr offfiffit dtifidwiata reCfloftfls BStSfiflived P)( ~L t(ll ^ 

(blP>JPIL.886386 


8 (U/ /rOUQ)) BR nietadklta recotrdl content is distinct: Iran the content of coimHimiE&t^ BR metadafta record 
contemt does not contaim the codtentof coimnumimtakiB:, detmail in 18 U.S.C.. § 2510 , as the substaimc.puipffiitt or 
meantime of a aoimnuBwatition. 
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(U) Tafete §.■ Tsui 


af Re^ivedfp"] 


(bJH3)HP.lL.886386 


pa>a i tiMn 


— ffTCMi'O i .'j ' N n r 


(b)(1) 

(blPHPlL .886386 
(b|P) ym use 3024fii)) 


(U) Table 6 summarizes the provisions offflR Order 113-158 for collection and the 
controls NSA implemented to maintain fflunpHranne. 


(U)Tablte 6. CoMaaltaiin Provisions andffianttotds 

(TSJ I SIW l W) 


ProvisiHHm 

Control 

Metadata PRtaMte 

problems. DIAs monitor darta fegpi volumestf jor anomalies. 

(U) NSA Only Receives 
Authorized Date 

data tom foeii m imp^^fe^LirttiDOp®Ta^GDi^l s§^terrrEB. ODItessffliFiitpjte 
data |j | to dieted! unauthorized date. 




(U) Repositories 


(bjm 

{bX35HP.lL .886386 


(U) ProwieadMsiBS of BR Oiraterl'ESI^S 


(U) NSA will store and process KIRamrtEu&tUt in repositories wiMhAm ssmreenettwjfclss 
under NSA aanttnll. 


(U) NSA reposttoBSS that stem® EBFRrmatetddtsta 


(U//FOUO}) All NSA systems ttltaatt sttamffi and process BR metadata ane certified as 
secure through an accreditation atnadl ceinffiraftem process and are in NSA controlled 
SCIFs, During 2013, the following a^otems stoned and processed ®Rimaudhtte. 


ppPReUftl 


m 

(biP)JPlL.8863g6 
(b)P))^aD USC 3024{ii)) 


fs//SI.7RJ^I 

. to fe^A: f 1 

1 is the corporate rauttuot cxHaanmag 

(taa&ase | 

1 

1 
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orate database 

1 ' f: il 

.• 


i 

• "ij/twew 


| iirttlie contimgsmpy k^eiii)flf for| l 


and has the $Wnc hardware and sMware us 

(SHRELTO USA, F ytiM f 


1 f *’ ".*!.,!MIHM.*-*•*-*.* 

jlAA 1 'iriuu.. 

(b){1 


(b)(1) 

(d)(3)-'50 USC 1 


36 
13024(1) 


• CUflj FOlHO) fe&fakup 


J- 


metadaDai eteworoaMj)^toi'ed Bill 


ijBHBttnad atf 


j The BR 


Jare saved! to tape backmgD 


I 


vvvi 

(6)(^4L;lir3i 


yLff IMS 


M N 

1 that rims on a 


I£iUs*jfi(<wBli(ffor the Bfl EISA program is software 
nrjri gyJH^ the DK rlon program is software 


iiiiiiiiiiiiiiiiiiii, 




( t>m 

(b)PP»lL.8S63&6 


systems move BR metadfeatlai UaetweonNSA systems. 

(C f OTDL TO UQA, P H Dty) How.ihf&mnatfon Js stored m[_ 

uslv F\yj jj)[ t 




] 


are the only agaHraatamail 

databases uiseddto store BR metadaittat for intellii^aime aaaafeh&s. As prevtota^y _ 

nterifapned,-!! ~| 


. (Mj i V£WMT> [ 



(bMH)) 

(bR2p»IL.8863S6 
(bM3)>-S® USC 3024((iij 


3 (U//ft965^ 


Wf3)hP.L. 86-3® 
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ST-14-0002 

(UMFOWO)- Figure 2. | ■ Architectures 

(TCWO li W B 


(bMD 

(bK^HKlL .886386 
(b)(3)^DD USC 3024© 





(U) MBA sy*temaacc«elttaB*ii®raiawhcbeiarffiifcttWhDprpcesse®es 

(U//FOU0J AccfSdtttetbwi | t (TS) is resptmsME for 

manapitig tfcerisk on all NS A networks and the compmttar s^&teamsand devices 
connected to those inatvookbs. TS respcmstiBailhiffis ihaMidde; 


(bK35HP.lL.8S6386 


10 (U) A relational! database stores data in tables using a standlwifeed data format. This allows similar information to 
be organized and queried! on the basis of specific data fields. 
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ST-144BS0E2 

• (UZ/f OUQ)) GuMhgppiKjCitiaiBfflgpdmi'meeseeing the devdfaqpntgitt of 
infotsaiHiiani assuaanecpFDggrarai aittmssssgryoto ensurne protectiiaii of infommaiian 
systamK iambi naitwakk s bjyy mamagihg! the NSA Informal urn S&ssniiiiyyffioiggatflnj. 

• (U/fFOU 0T Serving: as the NSA Directors Autfafflmahgs (Sfticafel ttoiacm'otciitil hi 1 
NSA infonimaiam systems, 

• (U/ /FOUQ)) Comiuariiiiggiifrfamtittit) t^itin&'ftalitaditat untl and 

risk managamaitt ipragri3mss,ct»ld 

• (U//FOUQ0 Est^tyhiiiggniJttMtflingngndeflfottfoi^iiag'dnhM'raflti^Jtsgftiteiris 
secum% i^jliilaajff sanddinplpltiBMantdaiUiii) gu iridldWm for SsfSNS A. 

(U// TOUQ)) Acmattltiffli(Miin isaltb®ffffiaiaiiimaiga§ianC!itedisttiiHicm tpepciicitipeparatton of 
an iitifottmatoMi syy^mTiimiasppdfiiAIeneirdiinimtcat at aracaptatpitatidcelcvcl of risk, based 
on the ihipltementation of an approved sett of teeSarikall, imataagmhl,aadcbpita3£lid-at'a] 
saf^siiartis. 

(U/ fFOUO )) Wflaan aooHdittti^ s^ttoras, TSusess ariak maiugBtnwM] t ffaarauwck'ktclo 
detannihec tltea|fp(Dpprit$tdehealcl of risk irritl^it»onnBeddddotcppwact.^yetrims, 
informaikni, Laidliiaftla'afrlrctutercTlittfctifravm'i’kork cotnopdkss six sBps. 

• (U) Catcgflsniiac tftei art’ifomnodoraradidiritoforaTiBliosp/sreEtcnT, 

• (U) Salted an inittikil toaiihte of security ©arttrdls anti ttaiLor as appmsgsminee ffor 
the $ptfcm}, data, swd anwranmnemt, 

• (U) Ilinjpbm^ntcimicbbllddhdisEsadtrritwetrntsoIe ntetliofonfoatitatiegssrstcrn, 

• (U) Authojiiae tflfeapmaittonodf the infbmtmakQTi s^sfeBBti(^aceppthimgi|k^pdnd 

• (U) Monitor cmttihutdljy aajridaasessssElidieffefitjctinestcss of the sssatrii^contrisl s. 

(UZ/J OtiOj )- Befbseafls§yttamsiaahdtiaaded to be pit on a mrahwatk, ittmtwBggoltitMgigh 
the m^dttiaitMiippfSoex^amtildebipppptecl/dti/ EbS.TS. Tafldk 7 lists tHm-ldatetittagfgh 
whidh the BR reposattoriass aatecaaaadidetitd. 


mm 

(blPHP.LL .886336 


(U) Table 7. Dates through whidti BR Repositorees Atee^taeciitbtfed 

(C/fRCIL TO UQift CV> 



(G # RCL TO U S A, fMQffi . 


(U// F6CM))) CerfffcGBaijicin In addftSiffliittohbc TS sy stotn glkl 1 

syste^ceMttittinggFHA^adg&aiumfefe bm iftailficd by ) [ 0TV) 

t ' ’ " I(,|T~V4), P4 r 4 i§ fljc JtfgA aaftoty fpr 

cerfiffitealtotiofi fcjsstetamsotersmei rdrdycyuaittt> eqjtipiitant wtfth thelb^laflMtiflHlltgy 
reguWiaras lpwtKsthiigg USP ipftipwaqy. 
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86 -‘ 36 


tour/ 

that oaMthhinBR mediate ta, to ensune thatttHuyycooipfel yidith USP privacy i^wxieooon. 


NISM systems and tftatecoiinpjiltiara nndiTte&j#i)\tl©ws. It is NSA” s 

authoaiMiiw ssmiceefcfbnlfeUtimphiplissioasiairitidtcaiio n s. TV's certnl&cationppjoeess 
evaflwtess %3bm i camtttdi rfdb nmi n twmiiiMn gooipiipliasi ce in the followhmg arteas: pwigte. 
data retemttiisni andiqgiroggctfffddtwacaesess, querying, diimminaatiKrin.ddatatig^iijgiB, 
targeting. and aarai^aklpp®o«ssssws. 


(U/ff QUQ) To be omtii'fedd tto hanik FISA data, systems limit tetaartiriaddb^y TV as 
pant oftlite CompffimnHE (Ekrtfifiaationppi'oeess. Tafo&e 8 shows theTWceaMfiariOHin 
dates ftnrreppsaitdEicattdtatcxniJoiJatn BR metadata. 



(U) TaWe ^sBtinnrmoia^altih prpKdxiitfflo^ of BR Order 13-115® ftiarneppsisitociesiiKlididie 
coswtiRdl NISA implknitiiitted to maiiMaiiicompphiancc. 


(U) Table 9. BR Re posiitsi^iPP®oi«is to reach C ©dneko I 


({ Jj«rini ics-X— 


Provision 

Control 

NSA will stare aemrtlppMeessMnri^tetMfe in 
repositories within sasiur© networks uumder 

NSA control 

All 08Rt FRISA are certified as strumas 

through NSA’s Systran aa3OT^^iti)®r(TB?)aadd 
certification process ((W4))arod located in NSA 
controlled SCIFs. 


(U// raue» 


(U) Access and Training 

(U) ProwEBarres of BR Ontteir 13-H5SB 

(U) BR metadata sUaUl ( 2 ari^iajijqeioinithihgHgsusliahcMmtfwfiB'wai‘cl atisbothoiiotatrols 
(incliowttiiiu; lamnaMbhatidataom'iiBesroiees^s) can resttaktt aacefiSidatebdriBade^epemodnel 
who have rate wadi tqppnippKitereirBtiddadQqteattratranjp n^i thithgard aodthb. thiaharitp ri ty. 
NSA sflidll casstiictuaessssKito BR metadkatottmatftharat<^<psc«Mdicfotoditoahavecareedvcd 
appropriate antti addqqaot araiii tmigig. 

(UiApimmiatWytittaiad'AiaddLfthtiiiHadcilfeitbolujiilcpir^MHeiindyiimesicdGSS the BR 
meta4atet«Kpp^bmthktsprpcegsesQSeed^eti) toiritaMcuiaMallifl- feme tilm&aH i^e nee 
analysis. The Court understates tStatthhaddrfciaidalitpcrsoiiJlideEpeiftQMibliiiifor NSA's 
ufiKtel^iitgi (impMataciiiiifmMnumm'C£iQjidht3itrttnatTaRsieiion of the BR metateMiiffiornttibc 
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specified persoas to NSA will m©t receive sgsaiidl tiaaamhjg nsggattiiiig tttte 
granted lteeein. 


(U) NSA'ss OGC OTidQ0SMKvv^llfuftitadncEa^iimiithihallaNl. < WSA ; ipsarB(w1n®lhwh®a83Gcivc 
quay results in any fomm fimat receive appropriate aatwld aEdkquaee tlrairjng; aaud gmiidaniiK 
regarding the posjatiuBSS aitdreeatidtitioHsWbthiitidiKlliilgigiiKiidid'ieaMinidriwion of such 
informaobna. NSA will] imaitittamrecocalds of all audhtramiigg. 

(U) OC3C will 1 (psiwitic IMI NffiEEUwhkcqsipfcs of all formal Midiiig and/or ttaahiiqg 
materials (ihodiirilnigg ajj] aswiisom^) usseti to brief or flnainNHSA prKOimtl axuiuecruiigg 
this autteri%.. 


(U) Reslnruttiiiggaa 3 ceesdatfiBFfticrtadaBdlata to autbmEEiti ppaissjuiimefeI 


fTS17Sli?t^fT The Sigurd Is dtttedllgeriiEC iBrceCtoatte's (SID) (OUTbec of Oversifjht & 
ComplianaoE (SV) wanifass «mrriiw eekHv rHaa r mgrenmsanrhhrigmtdaaoeess to BR metadata , 
tHtereqqirifddcorddetitflal s | | 


m ^unrttfi^Hwn 

^yyj| The training required for these.ivwO) fircaiimtials is listed ihitHie"A^ppjppaiate aiiad 
Ad^^Trtwuti^'lteoaliiigg of this sottiam, . - y fb^J 


(TSmw^ The 


Pal signifies 


that ah tri 


dual 


belli 


PjL. 86-36 


cquatcly 


1 


and appropriately trained (ftikmseddlMdm))wHMireggaid to the BIRFISA program and 
provides the aaatltaiEaitan to viewttteresBihs of JffiR. mettad afea queries, in arryf&rm, 
including wtiiffliasi aatadocaitil ssunmnaaiass of results. | [ does mstt provide access to 

the BR Bmmttdiata ihitHecbblifk mcttddtttd I)MDP faprqifd&Drtusaa' anthtthaataatiton to quay 
the dat a . 


fTSMMlllflTi)) Table 10 shows a hre rikri towm of the mimikir of personnel wiitfllnl | [ ias 

ef&l Deegffitear 2013 by affiliate®.. 

__ (b)t 3 )^..L: M--& 

~TT Sf/3WN F})TaMte 10. Number of Personal wttthU , .;;.lby Ittliation 


( Taiiamr) 



fTSfiQlf/NIlJ) Table 11 shows a brerikdtowaii ofttfee |as 

ofHl Decemrilterail B3 hjywortk itdfee. 
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<bMD) 

<b)P)W.L. 86-3® 


(T3H3 l fHg y Table 11. Number of Persotmmdl with [ 


(bWD 

(b)p)ff?LL86©Q6 
by Wontte Role 


Work Rote 

Number of Personnel 

Analyst 


Oversight 

Leadership 

Staff 


Technical 

Contractor 

Total 


■«=) The[ 


tW(3)-R.Lj 863636 

JffreWiltial Sfftrifies thattepperstmn is Sit 


fPrnaiymij. 


IM© ij^TOMiojim aad ii lire first step jffl<^ainiiiggtl9feaM% tsnii 

IL [ fe petfeiw pieties a^inst 1R metadata. .1.1 £ 


rized to 


araitoiiksctl for- spedffir intdllfehiuec anafestts wodting CT targets «tesmiifedd iinttfee BR 
Grderaauti ttedhiibailpaEreonabivi^icnmatataitlBetb^sSfiateiins that processaaneld state BR 
metetea. UHrc BR FISA Authomidy Lead k dlteiiiitlitiiiKitaetLalidmfti tyofoiedktin^ nwltfehi ch 
orgatmii^tttoBsaarecaathhtizEzfcdotacaeesss BR metatea isfpassitaHes.. 


- fTSi , A , Sffl |l lWr.) Table 112 dhows afittoeafekdown oftte numbaraffipeiSQiMl eWntiflh 
as of 31 Deoontber 2013„ by affiWtaicwn aMlworkkrafcle. 


(TS N SI/1 N FI Table 12. Numbeir of Personwradl witttt-l 
by Aflfflte^ie>enajgieicJAtofie!i'^F5(pt©ie 


_i 


jfeffs t wFi) 


mm 

g#.-& 

i 


Affiliation ateWtorMiFRite 

Number of Personnel 

NS A Ciwitass 


Analyst 

Oversight 

Technical 

- Total 

NSA Miliflamsy 

Contractors 

Technical 

Total 


fTat/awwr r 


4 TO-''/'Gr/l ' H I In Motion tef 


Jf an uaeaiado 


,(b ... .m. 

(b)(1) 

86-36 


query BR metttdata usitigf tdte intelligence analyst eomtatat dhairiri^ ttoP],tu'CDii.Mi®n 
Chief; Deputy Divisiwjm Chief, Brandln (EHietff. or Depuidfy Brandn Chief must sdbniti t tto 
i n&flitest triat ttte iadfe MMl be eivefiictmewama ssss. If the indivMMl fe 

| | crede«itiiafls, SV sends an 

Jieam Sndd requsSlsstlblaathfo ptpeprote tel defied to the 



e-ratail to the( 


J/1 M I U0) 
metadata, in 


.(b)p)^lL.8|^6 

] is fie ^rapfabal user iniorfhce analysts use to query data, inctattittg BR 
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TOP SECftBETif/fl l flXOTOnM 


Jliisar Group in£ 


] TFfee 


when axonpiMtite. Upon completion. 


M_ 


ST-14-0O0J2 

ladmiimUnattnr wsiffassthe 


person’s credentials and training, a ifethdmltiq nito the ueajrgampp, and notifies SV 


intoptatBcalll^ysends an e-mail to SV 
ffihis adffiitional 


indicattiag that the person has been added to tide user gup up. 
manageraxsnt oo<nnt®6Ih iiptpeitaiHurdiat only apprapriattdjy ttainodchhdFaiiutllkptikail 
peiMwndl asteea&fodeto execute cfliwriss. 3 


It 1-3 sWpwS a br-eakjjpwn (iff the iptjerbcr §| 

J§@it'0f©tip with querying dsqf^iJifyfts @f 11 Beeember 20il, 



\ 


(U) Talblte 113. Number of PersmrraSI wiilth Querying (C^tattiilitf 
as of 31 December2233133 

tu/ zrouQ ' ) 


Worts Role 

Number of Perseininell 

Analysts 


Technical] 

Tofall 




- .*'« 

mn 

(biP)y«lL. 86-36 


(iWSIZ/Nff) Receiving Qfpeeyy reswitte NSA persotradl who receive qncsj resadds are 
required to receive ttmnihjgand guidance regarding the procedrancs and restricttwaiBS for 
handling and disseminating such infonnmsatiinn. Before analysts send BR-uniepe query 
results contemning U LSffR Mfifa nmtitiprto another iiidiiYMakl,they must first confitm that 


the reeipiottshas the ! i eredenttML 13 Sharing BISmqt-eia uc auerv t ssutuhs 


coining Wforqnafjon with ftti W&ttM 

\YdteiatdtbtfiR Ofder and require nwwtdeeto the (Smrrt. 


(U) Training nascoitatfes The BR Order requites that NSA maintainm records ofBM 
training, MSA’s Associate nDixstttoaatefor EducatisMi and Training (ADET) 
EntoifiiiffiE Looming ['Management! aiabdsasis NSA’s sauuKKE systtsm o<5fnaOTcld) 
for maintauiming t tiiaunimiugcranplpl Btrooea'enhrcfor all requited ttrauhimug. 


(U) FigasKC jBsfchcrasthe categories of individnuads auttroneddaocmsto BR data.. 


(<b)( 3 ]kP?.lL. 86 G 3$6 


12 (U/: 


isIMSA's Corpmrutt; Authcria ation Service 


and access conwl servinsssto NSA pregrorngand project 


cs authorization attritoutas 
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top SQGwmmiffx o ro rn 


(b)(1) 
(bM3H>.JL.88£: 


(b)(1) 

(b)(3)-JP.L. 86-36 


(U//FOfcHS^) Figure 3L Access to HR Information Determined by Credentials 

Maintained by BR Stakeholders 



(TSIffllflfl fffi O )Obtaining the wd ential To obtain tfaefc... 

a mqmk nitli spitted |nrire l- --.-.—7..-1 

NSA” s corporate amientlalling system. A | [ request, flhdst contain the name Mat 



Siiid spponsor who euiffQn% hotel the E^sWsted ceW^ntia]. The tedeciate 
Directorate faw Seauiky and ©mniornmdlhpmc (Q) reviews 
security aonmrms. If approved, ttiteacHflUEsJtis forwarded tg SVJferffmal adjudication.. 
SV verifies ttotthe indivMtaill is curr-saitt on the Kpptired Mining (explained Hading) 
and that tihereEfpsStind udes ffiv^lddm imsigriiistsfi &tatiiDl If all r$ajf£fittfcients are met, 
SV approves tliiEgnadteittgllin | ( f6f entry. into ] | 

-| fW^l//hiF) Main taining the p redtortfcldl To ensure that grasonijetIremoraicmr-entton 
traihiOfe . SV runs a | | report ssB^Mltim^mwt^tithnlidfetalhfiidipeperamoliel 

with the j 1 credential anil tltbmrt naming 2 ? t atu&j ay hi ch is color coded 

(greenscuirent, redsespikc#. If someone’s OVSCKBGD® o®i(0AS£QJIOO training has 
expired, SV matilTes that person by e-mail tftaUtraining musstbe completed. If 
OVSCI80X)) mrffiMSGIl E2t53@)TO Cil'2K6 ha s expired, acaasssis revoked immediately,. 
Access is not iKEStOinil tin nidi la ajw jvl ""I roeppurgStis submitted and all ttrairiingis 
cunsutt. If an individadl’s traimimg oesppiossand the credential Hubs Item iravriksU. ttiifs 
would not violate the BR Older. However, if someone masemts; MR metadkttti btatithas 
not amnpltaed:lthbcr(rpqirffddrarainr|?ghis would wdlfettetlte MROMim lteixaiiEe the 
person has not been ^jgmqpnitsijy anddaddpifUalyI yratiti«idedTKBna odat 1 atioreqrcofrare s 
notice to the Court. 14 


L. 86=36 


11 (U/ tTQUO ) The Court undensttovrtisthat the techmiiral perscmrell respORyiblte for NSA’s uudenl^iiigcorpowtie 
inftaftitnicttuceand Uile transirififflaiBn of the BR metadata iiom the specnEraH perssm® to NSA will not receiiwE special 
training regaining the authronihy gramtlcdl herein. 
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(U//FOUOH Appropriate amM adequate training NSA/CSfS Policy 1-23, Pr&cwdhrms 
GmmmiifgNSAI€M>Actiwiitfim That Affect U.S. Persems, 30 .My 2381®, naqpiress threat 
Agency ipoBSDinetl ((awllaaBS, miiliitianyy, rimliiltia^M-ffiEaT^siisisintBgi'gescsuniidiiissost 
contracts)) ©angftate itateflliproee awamg^ht (10) training annually., 


fTO/ :' l)l//NF) In BlMitioni; tQ.guall% for ltbe[ 


v-,,-,,. - , __, 7 _ l eRMdnrial and (fi&np% 

with the-requifemiiidtis ofthefflS©dkr,gMSSMsmmfithba®(E(Mpl]fttettdf^iafiiditraiimngng 


courses witHiiii tlhcltett 12 months.. All courses ancdA®vlhppddbb)NS!M’« ADETiin 
conjumaiiian mitthtHec OGC,missicmissii^^!nmuacexpqm'jsaiBlidiisHssiioroKnphfrii3aicc 
professiomdfcs. 


• (U/ /TQU© fr (OWaaeiOTO, NSA/CSS Intdiigangc (HkareagHtt Hirahingi;, ttfec 
Agency’sscooedOlQaMmesQsipiprodedbd to the wwiMskb? to maintain a high 
degree of sensitivity to and understanding of intelligence llaws,reggikiaboas, 
and policies associated with tfejpiBfeSfliian oflUBSP primacy rights cUm'h]ig 
mission atperaatixmiss. Personnel] cuecffarilitiaaatdwitiflnhdunajtsj ijetetncts oftlte 
four ©are; IO document*;: Ex©cutik$ CMurtfEGD) 123333,aa aaietixtethd; 
Dqpar-tment oflEfaffeme (Do©))Sbgulkti<rann352KD. l-R; DiintaaikeeT^ppe 
Memoiramiinni ((IMIMJ) 08-052" aaidi, NSA'GSSSPBliligy 1-23, OVSCIOOO is web 
based anti incltate knKswlbc%c diueiksstiSc ipptfftfiiettBnc.y. 15 

• (U/ff QUO) "OVSOKMW, G&ecvwew£Si£nglsa IbitMli^hg©ncAututiliCieki edrethe 
core SJK3IMT IO course, prawiitte an introduction to various legal authorities 
that NSA uses; to conduct its ®jpMKiums. Upon cotnplkuaan. patsumiBl! sdhmlttl 
be able to identify applicable aurwalUatuee caitliuriitess aatadhgblietealeldafufhie 
the teaicprayijskiHs of the aitttmittess, aiilii(Monttify stitoatioKi saarid 
circumatanious naa^hrrmg additional tauH<t 0 itiyy. OVSOUOO is welb based and) 
incluwtel^itm’Wd^gectfecbk sffcppD&tiimxr^y. All jMnamnull in the U.S. SIGENdT 
System (USSS)) working under ttiter^SACCluctaidir SISIHlNiTithorh^rWytlw i t it 
access to raw SIGIMT are required to complete OVSOI100 every 12 months.. 

• (U/ /TOUO) OVSCMHD ({And lytic) and OVSC1MB® (flEebhnraiDJJeggiil 

ComphamsoE anidlMhiinMafiitimiPii^^ SIGENIT IO course that 

explains policies, procedures*, and imipmsiblbiilaitae s\\\khln lmmsisittnaudKi 
functions oftHu; USSS to enable the protefliian ofUDSP and flmiajgiippantacr 
privacy rights. Upon successful completion, MSA analysts writiimmssinn 
requirements to access irawSSCiliINTUaiabdsasosiU'iHahauiaQtidtethdchdditalinal 
training requirement nmpx®sad % SID. QVSCIWtiD and OVSC1OTS anewafb 

sfe-fe Ned artlMoge :,&Mppdtency cxgffiis ) 1 

■' | Personnd who do not ipafeaitfacttest after |Q [ attempts must 

• c o mp lete: remeditdl tr aming, All petamnrfl iintlitell5.SSS l vwdiikikigimMcthdie 
NSA IBrneltais’ sSSCffiNTiuthdiTWri t yvitlit hcaess ss to raw SKUWTaaroreqquectd to 
complete;(SX^SSOM® <ar(QNftSO806 ©woiy 12 months.. 


l! (U 'TOUO) E.O. 12333, United Stales Melligence AkUmlikx. DoD Regulation 52401 H-Wl.Procedures <Srmmmihfg 
the Activities ofMtM Intelligence Components That Affled USS. Pemaum;: DTM-0MK2. DoD Gmdhmre four 
Reporting (kuemmwMe Intelligence Jkaimilies and Significant arrffllgjHiy Sensitive Mailers. 
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* (U/lf eUO)) Of«£M85 (fAwk)y ti)c} anal OVSOEIIK «T®Hn®UaU),, Special 
Tramniimg amFSES>A , asfchaanedd 10 courses that present legal politeness sutiWMiiiiing 
the FISC’ ©dies siadcRRA St st&toridrd peptaitauign g to specific CTffiamssdj 
progrannrs. 0VSO28KS anil OVSC113M) areswdbblaaeddaanidd iindhdfc 
competency ©san®s\wiiMi ®mihimraiim jy^saigg seemee of 90 percent for 
OVSC130? airil®9Fpc<rentitf(fici iQysSC2Q0^,adiig^teprpfcicffi®ticpcJhtfasrhehib 1 d 
than otterotmiseesteeawee BRFISA data lhasaisg-eoaeippM'lijlhiitljty of 
containing USPiriarntmaikot. Personmd who cite mat paftsttisetitesurfttciooBe 
attempt must (canpibtecreoiudiliilaili'aratning. All personnel with access to the 
FTSA program arcDKqpimjti to compfette OWSO2095 oafiQySSI2(M)&\®r^ry 12 
months.. 

(UZ /fOUHQ)) DoJ NSD review of traimiri® maternal I As tflta: BR Order resjfjurees, NSA"$ 
OGC pffiwiihss DMI NSD copies of the muttariid] ((sc gt,,(BASSfllQS) 5amiid 0VSCI2B® 
training courses) used to train NSA personnel on the authority. OGC most asssnt% 
provided DoJ NSDceqpbs of revisiksi® to the ttnahihg’ nuttataiidls in February 2014. 

NSA lliatl itotiimiitHeetittflihiggnmffidribl sb bemuse of the 17 January 2014 program 
changes, wHicHi itudlutoti tttoe tuwhbppliliiititatiomadd FISC RAS-aprawdl possess. 

(U) Access resfpaieenaeitts for technical I tpeitsamroiltdicBBReppsifeitimes 

(U//f@W®)TTtee BR Order states tlhat a^pjqspiaffiljl y titaainddafldduMhdw rktdetddhn id a 1 
personnel may aunasssthbe BR metadata to perform those processes needed to make 
the datauE^kftfcrimethUggcnecaaHljlyisLS Jlfdtrfdbitem^glebadribcShdimpqsitritDaaesndnd 
systems iandthhoiacecfi serpqmraemtsi tfofdedbajuric ijdepmoein c 1. 


{b){3)4>J_. ffiiB-36 

(bM3)FS® use 3024<i)' 



~tDUU' <D QUO » Backup tapes are securely stored! in a l ocked ca biimat insndfc a resttiknteil access room at a secure 
L i I facility and are only accessible by deriptided f I peasamndl. 


(b)PHP-h-.886386 
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(Mnf>) 

{bIPHP.L. 86^36 
flB)(3}-500 USC 3024$^) 



w$. 


(U/ffF0UG}}ISfSA's Corpawatte Inffiiaistiiiictuiee Technical (passanneil 
responsible for maintaining ifigM 'ssumddetyyi agc«a^tp(atatiifrfeastiatopirand 


transmissienn of BR metadata to NSA (e.g., corporator 


ate 

JP 


personnel 


and ShanePointt s^toBiadrhhiistsaairai')sftE£r(not required to receive spmnkll 
training regaadihggthe BR program. 

. 86 - 3 « 

(U) Access nsQHiiieraiBetds for analysts to query EHfR Repositories 

(T g NgftNW) To query the ! 

analysts, includfimg !EB^s,tWtst be Hinted gwtM f l U’ser^^g^^^H 

The process io be addaa tlt6 the us er pinup Wvsss disnu»Hfl±l intih 
Whim ana lysts 1io& iii fe t i using iadiir pftjfe 

pa^Wrord, | " lveiffiffiss that the analysttssatcellsteidon the 

gfrid flftcV iiivc lhe| 

toe requhioaiiaBESiaatBgjiet, t lie 



lifflftle ill ! M p§fy 

had the ability to run queries on 


(U/i tf : OlM) l TaJMle 14 summarizes the P'OMfifcms offflffi. Order 1LS-11S8 ffnraaBiBsss and 
training and the controls implemented by N&A to iMtuntain anmptliawee. 

17 (U /f^HW I I TP tediliuM peifs'srhtci system mmm te l ^ WtoiHiinaied'. 

18 (jit' FOliO) PKI i s used to autheaafcafc users. on NSA netwenfe. PKI binds oublkkevs with feds foi~8iiiliiit;ill 

ccrtofetteauthoriitty, I |1 


T 0 IP SEflBCTrt'SWXQEQnX 

22 




































DOCID 


: 4273474 


TOP 3ECRET//31/ffiOrORX 


ST-14-0002 


(U) Table 14. Access and Training Provisions and Controls 


(b)(1) 

(b)(3)-P.L. 86-36 




Provision 

Control 

(U) Access to BR metadata shall be restricted 
to authorized personnel who have received 
appropriate and adequate training 

(b)(3)-P.L. 86-36 

metadata must be approved for the[_ ! 

credential All personnel with access to the BMD 
repositories must have thet (credential. Ali 

personnel who auerv the BR metadata in the BMD 
repositories must have the! (credential and 

be on the! lUser Group ini 1 Ail 

personnel with thef Jcredential 

must complete appropriate and adequate training 
verified and monitored by SV. 

(U) Appropriately trained and authorized 
technical personnel may access the BR 
metadata to perform those processes needed 
to make it usable for intelligence analysis 

(T606I//MH Technical personnel with access to the 
BR metadata must have theQ 
credential and must have completed appropriate 
and adequate training verified and monitored by SV. 

(U) Technical personnel responsible for 

MSA’s underlying corporate infrastructure and 
the transmission of the BR metadata from the 
specified persons to MSA will not receive 
special training regarding the authority 
granted herein. 

(U) Technical personnel responsible for MSA’s 
underlying corporate infrastructure do not receive 
special training regarding the BR program 

(b)(1) 

(b){3)-P.L. 86- 

(U) NSA’s OGC and ODOC will further 
ensure that all MSA personnel who receive 
query results in any form first receive 
appropriate and adequate training and 
guidance regarding the procedures and 
restrictions for the handling and 
dissemination of such information. 

(TS//51//MF) Before an analyst sends BR-unique 
query results containing USP information to another 
individual, the analyst must confirm that the 

recipient has the|_Jcredential. * An individual 

with the^ ^credential must complete and 
remain current on required training, which includes 
training and guidance on handling and 
disseminating such data 

(U) MSA will maintain records of ali such 
training. 

(U//FOUQ) NSA sADET Enterprise Learning 
Management database is MSA's SSR for 
maintaining training completion records. 

(U) OGC will provide DoJ NSO with copies of 
all formal briefing and/or training materials 
(Including all revisions) used to brief/train 

NSA personnel concerning this authority. 

(LWrOUO) NSA’s OGC provides BR FISA training 
material to DoJ MSD for review before modifying 
material in the OVSC1205 and OVSC1206 training 
courses. 

* tat Rci to usa. rvcYiT 



f Tavamr) 


(U) Querying 


(b)(3)-P.L. 86-36 


(II) Provision s of BR Order 13-158 


(TS//SI//NFt NSA may access BR metadata for purposes of obtaining foreign 
intelligence information only through queries of the BR metadata to obtain contact 
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chajmim'g larfamiaitmHissiiigg^istekitoffittitmnpiappEdva^ sasde^ds. A sml\ is a sdiaaium 
term aj^awddf&qqacsririgig BR metadata. All ^dkalcanitteimadobbeuGi^d as seeds 
witfin whidfa to query the BR metoteta imu.stfifirtstbbcipppi'mctd by the S214 Chief or 
Deputy Chjef or one of the ttwfltn$y jy £Mltiboira®td HMCss in the SID Analysis 
and Productkm Ointorttmate. 20 Appnmall fedll bbtg^m3©iti^l yitaftoiithtedgsiatiadt ed 
approving Ihhs aldtettuni$rleditih fetaiutbed on the ifosttiMl tmitippaactklal 
conaMtotattoBs of evoiydiqyl ilftf© © wlwbicheBeasab&b 1 an diid-ipj^ntgitiryoi soaia, abfrrfthcrc 
are feats amitra? fflksttoalR^BStHfaHthdtfctetltiotionertmn teebc 




J (het®a(teitHb(FFMgigBd3«Bi^rs). Iftrite lekotism ttemi 


is reiMondblv belied ffl fa g usaql fay 3 jUSP-ttkc MSA Q6£ fflttSKtfifgjt 

)(3|^.l: 8fe-& a§ l . . .. . ~l 

(bMftttl U®C 30a4KJ1)'[ 


solely on the basts of activities that iWtejptfliecaad by the iftisst 


9.1 

Amandkmmtr to the ConMititutiidnn. RAS ^ppttvails stJahl bfeeisfSaotevfofcliSOSflijfeltsr for 
any sadtefltam tfermra'jDaanahlb'NbitidievtcHb tbebusettto^ by a USP and (snffijyaaifcfoalfeltlthdncr 
sefedfeni ttaairms. 


(U/lf s ©W@t}Htutfeemum,e,qtapianes of the BR metadata usahg; RAS appntswaJiseidetitii) ti 
termsmtaNooci^eididjdtyhpajiftMlLialialpatlyptefistias'ythtotigb ugk fchacau bradatpthfuery 
process. Contact dnsaiiirigg qpedifie$ ofBR metadata will begiim wtfruiddM&iqpptmlcd 
seed, and wil return tm% that maotadata withihi tHreec iMpd’’ of the ssoidl, 22 




19 (U If QUO) The tenml l ‘setedS®i tefins” ineUutlssIM is not lirnii toilto ll identiifare/.~" The term ‘iderodtfarsCmeansa 
telephone number. as that term is conarmemlKv understood MU USedj 


[ 


20 


HTKIMVY^ 'Selcdtikin terms that are the subjadt of electoahfc surwillanjceauthorized by the FISC based on the 
FISC’s finding of probaiMle cause to beliew fhtit I 


_those used by USPs, may 

be'de»iMappiw®iITdr querynit^rdr the period ©fFISC-;withorized electeariic suweefflancewithcwtt review and 
approval by a desifflnratadii^ooi-iiQgjtilftiiaial On 26 Febrtwry 2014, NSA began sending selectioai terrais to the FISC 
for RAS approval to comply with the PresMenfs direettiissoeof !l 7 Jamusuy 2014, On 28 February 2014, the FISC 
approved RAS for the first two seleettBin terms under this new process. 

21 (U) The First Amemdanant to the U.S. Coansaitution prolniiDriits making any law abridging the freedom of speech, 
infringing on the freedom ofttliie press, inter ferin gwith the right to peaceaMy assearflrih; or prohriJfeiitiiggthe petitioning 
for a govemninmUredres* of gjrimennces. tliie BR Order no longar requires that NSA’s OGC perform a Fnnaat 
AmenutonBrit review of selection terms used by USPs for non-e®nB'gput®yRAS reqwsttn the FISC perfcnm® those 
reviiewss,. This change was matte following the Presidents directive on 17 January 2014, which requites that NSA 
submit selection terms to the H3SC for RAS appnmJl. 


2 2 prai i 'Dl.- ' -Nn The autoplaied query process was initially approved by the FISC in the 7 Noveniter2012 Order that 
amernWIdocket nuimfeei'BR 12-178, Alttaa^happrmedl NSA never implemented and is no longer authorized to 
use the automated! query process, since it withdrew its requesit to do so in the renewal appicafomsand declanaiimss 
that suppsmtttliie BR Orders appnmdby the FISC (beginning with BR Order 14-67, dated 28 March 2014), 

23 (U//reMJGf Tlbe first hop from a seed return® results indtadiingall selection terms (and their associated metadata)) 
with a content and/or connection with the seed. The second hop returns results that include all seledtontenans (and 
their associated metadata)) with a contaot and/or conmeetkin with a selection term revesflraH by the first hop. The third 
hop return® results that include all selectinn terms (and dieir associated metadata)) with a contact and/or connection 
witha selecttismterm revesflaBby IMe second bop. On 29 Januany 2014, NSA’s software system controls were 
modified to limit the number ofhtrps from seed selectman terms to two to comply with the Presidents diiatBiiikeafrl 7 
January 2014. 


(b«1) 

(b)(3H>.JL.8GQ»aBS 
(bmm USC 3024# 
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AppropuimtilLy ttrahtdd aiititiathboiag^dtacbiuitula^qDsxifaoBliahapajciqipcry BR metadata 
using selection terras tttattfaarvaraob&Ben RAS appi®mail t® perform graneessesneedddd 
to make the BE iniatadatoi«rtlfofQnMtl^HgcffiC2Qiaik>3lysisidiiiiiapajttafeate tfesufcsults of 
those cpaiiss^h!©i!l^ratiali)d^(iq3e|sairaeiiieisp^btiWorflsesfapffpnHgsoses. 
Howoeir, the results of such queries, may mat Lteunsdd'dbintBlli^epeBC anatwlysi s 
purposes. NSA must taimuio;tItdoaMUglahidtstpupiietttedaimiLainaliid 
maHi^aniBoutajmttTdialthnqiip-tescs offflR metadata for inttdl lgpnsec aM#yi$i ppnptp*escs 
will teinjtitatetiiBMga:)Oi>tydelBcliDiterQiKittiahhti'habeetisceii RAS ajqpovedd. 

(U) Presbferrttedl divostirees affeettiiigg quenythtg comttni&s in 2014 

(U) On 17 January 2014 and 27 Mardo 2111H4, tH®eFPeefddcn t oftlire United State 
directed tHatt NSA implenmaitt tfhefftiUowiiipy ebhagecsototltbc BR FISA program: 

1. (U/JFOUO) Sitariit ssdkciaxRitttDnsi sotalthcFFSSCfofo r RAS approval l. Before 
17 Jamnany 2®H,ss4iecitoDrtetenms'arere RAS approved % tUte S2M Chief or 
Deptufiy Chief or one of the ttwantyy spBoiidljy eauHoriiedd HMCs as the BR 
Order imqtirecfcl aadd OGC performed! FmsB^Aneoddraotitreeyeift'sffosdebafoion 
terms assraBiatedd writh U.S. persons.. 

2. (U/ lfQTO RestliicttarmttoCtaHawiBiiggtto ffiw® hapsfftom sasrdsBfeictitiontdetras. 
Before 17 January 22D144. aqjrpoppHHil^ vtrppwttdiffldidLahdtoiadedJ.'WSAiatgatysts 
were aitHnriizdd ttotjaiiBeyyctdiriee.'bo^GpbQh'everyer, NSA guidance neatmnaJi 
those attdfyjsSfcs to query BR FISA reposhteaiikjs tfcwe IcpffiffhniissedddehtixJtDn 
terms andicoiacaddiiitinalabdip jptlprhed®c>^»©pbsofino Hfcaafcetbtedtacti ooartctKijns&'itWi t h S2 
divisions mania^inmota|gporabl. 

3. (U//FOlIL®)) StffBaBKRnractiMata ri n provider controlkdi rspstaitaiess aiddiMt) irin 
NSA repositories, Onceihq^teiaoradd^SAvihiyutiiitoifllSlISfpfappedviRARAS 
selectikm terms tts provides JBartifeeni to query their repositories. Providers 
will ptswidtetiDo NSAooillythhOTSistoits ofttfnsse queries. 

(U/ 7FOLK H NSA implemented tjflnsc first two directives by February 2014. The tfoirti 
directive,, storing BR metadata ih^ymokidcirappasttoa'tcstiHlidLtDtoait'gngirityi hadtoqoeqy cry 
results Jfimniiyi(Dwvddffl;s,w^lllreqqim-^paapgc of a tuewsstattetffotlth^ of 

business rmsiidte, wb&dhlhM d otdleb u 03 n axrtadt ed Imili dri st kiepodp w&swmietla 1 ed. 

(U//F OUB8P TM$cremnaiddier of this section documents theomitttdlft&mawoKh'k in place 
for qntatyiiqg BR metadata in 3®H. iimdUdiiig tlitcahhaggcsimtpjbdarnettedb^yhth c 
Preai(ikntfsscliiecdti'vesimt20®44. 


(U) Deteirmrihiiiiggsseelcfealelstalron tennis for reqiussttfrgg RAS appiOMedl 

(U//P OUO}) Amdlyaks working CT missions foeaacmilfoaldsaldeBdntTdKnmi^lririicbaiDari 


be derive ffiwn multiple mmass.r 

i (fotS)-P.L. 86-36 

,, 

1 

Amdiysts apply aaiitle PipUfe ofittaddccaftft in deteransi 

ring! wtfiutiisstdentaon 

Jranus to pursue KASrqppoomlil -fl 

1 


_r 
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TOP SEflftETfrS l tfN a BBRM 


ST-M-tKJOEZ 


(b)($)>ff!L. 86-36 (UF H F 0U 6) AnB%SJfcs making determinations whdflnnr sdtoiinn ttennasaarecti^|ihieto 
be used as seeds uniter rHaeBR FISA auttanitty must consider all the facts they know 
or reasonably uaanknow before sutariittrng rcqqmestsfor RAS approval Looking at the 
totality ©fflie (dimnuunstances, amad^siks GavdluUte \\\h faghtierlttetisia RAS that the 
selection ttanssaatceuasddby persons aswirajiatddwith one ofrite tsjro®6istt organization's 
in the BR Outer.. The level of proof demanded by the RAS standard is less tihanaa 
preponteramJE of the imitiamtceor probaiMe cause.. 




(U/ ffOUO) Nonetheless. tttxeRAS standard [eqtpdeesrtmocethan a mere HunthhoDr 
uninformed jgmssswxDk. Analysts must haw am '"antiixnikllite rcaasDu’^iqiptptndetiy at 
least one sowrc©, for suspecting that the person using tftjessiietwonletm is associated 
witihfQme oftlte terrmrjtft organizarthms i n the BR Order. Source imddto justify RA S 
requests iiuxtliuMe but ante wbt limited to, [ 


associated with USPs and foreign petwxm. 


.IJ4 1 W -PA:S* i-wi-u unit y-i !>uyj--m-uu- \a iiilj 

J Tnc RAS standard is trie-same ror selection tenns 


lr-NSA’i 




- (TSi/5Wj/NT4 Analysts (titetttuaiiQallUysidni biti iRAS reque sts in£_ 

RAS selection feciijift mi^agefffleetTt system i T ~ l has requited fields for analysts 

too Bte|Ml|itettficatibns Ibr RAS requests, user raMfenidlltiJss, and user ties to at least one 
L. 8fe-Jfe d.fe'eflie terrorist bfgraisations in the BRQrte. A ffiAtste sg^dteesgpppctttigig 

dtatuflrchtation for RAS rdeppstis in j ~| for review by designated ctflfwaib. 

As aittihblized by tttec ,l8R Order, i f selecticm tetms a re subject to ongoing FH’BSG- 
authotized cdtedtoric gqiwallance | | based on a fimhiigof probable 

cause that the selectiffim tern isaisddLoonbout to be used by persons t&smuiatddwith 
one of the iiitatiftMlfrfmi^ipoiwos^r^J SMSAajnttge the selectman terms to query the 
BR metadata wiiHnxonntodriMmmpggR AS because probaJHte oattsc; a hjg hor sttmadariclb teas 
already been met. In these cases, entries aacessiliOIslAibmtttfcdiithiirgh ih! ~) 

along with supponttiing cteouraerfltidoji and HMC and possible OGC review (if a 
Sfelqejtpn term i§ aviated w-ithaa IP&PiLwg^Jd^o fee jeeqid'cd. Mblfdmg fco 
aanaialbutof the selection tenns submrn ‘ ‘ ‘ " 


' »-so LocsdSfi) 


wmy 


( . , _ rp3)- p -(- 

for RAS approval aaceddgiYedctfrom f==i| -- 


88=% 



)IMahtfeaiming the 


list in 


flBS^//NT)t 



24 (p/TOfelO) If RAS requests are based in part or in wholeon NSA SIGUNTT, NSA perfonmis a purge verification 
check for the selection term when the request is submitted! to ensure that the selectman term had not been submitted 
for on-demnanfi retroactive, or reacfismKmy removal of data from NSA SIGINT system rqpmtiftims. The "purge 
veritimtum'" field must be filled out when creating a RAS request and must be condaaatadno more Km 24 hours 
before submission. 
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mm. 

(b)(3)4».L 86-36 
(b)(3>Sffl USC 3024(1]) 


ca n be met only on selection ttBTmsaESSc«raaitddwith the temmistt 
organizattiiHiB l|-sted h Cl | Those would include oj'ganiizaaitooas] i llstfedni tiithe 

FlSC-mih rovaH. BR Order or based on IC neqpmtnsgand deternmaafl by NSA’s (QKSC 


(b)(3)-P.L. 86-36 


br. Order,:: 1 


1 



iiy 


H duals 


Sued lie 


.i .uin 

■ 

wm 


.tetilgriatorganizailiiaamlfet in 


f 


[ | BflS|A persoFiTtdicl were assigned tHissrocbte 


_j (b)(3fP.4LS&g66 

J which NS A implemented imJiiunKie201®, provides tfae 


system oMtrol framewedk for nomimtt ima, iiinstifvin fciasnefowi na, approvtiing. and 


)i 3 )-i 8 yie 3024 (i) dtapppSiving RAS for selection hfWnsAl 


_has birtt-jiffit mth^uadisto ensure 




that RAS approved selaniran'teaiinfe comply with requiiramenKs of the BR Order 
(e.g., reqarinodl RAS approbate ddaoanraBtttddoniyjapppTwvddcteariaistr^amaHjKiJronscdised 
JoformS; maxmimtm ttmseliinBitsaot exceeded ftflf MS aptwrewaten l ~| i 


(b)(3|»P..L 


serves as the aittiilhttatitivesource inrRAS approved ssitetitoontteranasand expeattts tltoe 

iei-ms to other systems in the BR eentrd tfamawwlck. 


im 

(b)W»X.88-| 


(U) RAS approval 

(U/ /FOUO j In 2013, tllteRAS approval process ihixtJiii^tdbeetajhntTOebharanw^S^ 
usedfl© detenmu me whedaar sd kaatmm tennis wane atasHrisited with one of the ttarramt 
6K)5gaiitjiations lt d j before BR annitlllnsntKBtl aaafajyt&scoeiidclise the selection 

terms as seeds to query BR metafeta. Consistent with the BR Oder, all selection 
terms used as seeds for querying BR metadata \weteffiBStaiappvncbdby the S2I4 Chjef 


25 (T3/fGMW) I n Mav 2012. Pol NSD stated that it was gemendlivaccesKiffle for NSA’s OGC to detemmine.based 

otiltfenoirdiilwi’.l l , L J 


Mil 

ntladdiMin. w ith the condiwm otffl^SSbeing met, NSA can inch ( _ 

J ii , 1 M ;Mgft fll « hCf W A iMi BBk m ite 



TOP S ECREW/gf/fflOFOR^ 

zn 


(W) 

(b)(3)-P.JL. 8BS3BS 
(b)(3y«® USC 3024(1) 


(b)(3H».iL.8®38S 
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or Deputy Chief or one of the 2D aaatMaxciieddHMtBss. If seledtiiam terms av®*ffe 

reasona1h% befessll to fee lusdd % HISBs, NSA” s OGC diaeeinimdd\%l*itiicitltiidJS]5Ps 
wociKjgaxlidd asaasEsrateddvwdlk)oec of the tend list organizations named in theBM 
Order suihi^oaaitbibcbimsis of activities protected! % tte First ^msnatfmont. Figure 4 
illustrate tlte^^app|DOGruhlppooeessiinp|ldaediiMiigig(BGl 3. 


(U) Figure 4. RAS Approvals Nemtedi Before Querying 

(u/ /rouo) 


In 2013 


NS A anaij^t seefe apptrosv^l to quev^r th© BR metari^taa usiurngj tin© ^bffelfction temnti of an tinatikxrdiia^L 
su^pesxtfcsid of beirrngj asssKaalceki wiffln a desigpad&ek! termnreat otrapnizziihiooti. 


© Is titotes a reasaofmtettde artiKuktofede swsfpmom that tflfie ti'iii'ilidijat is assaana&teld wiUn a Id^njjfiliated 
tetnmsrtcat oirg^niratitboft? 

mammmm *q<® 


HhmofOid 1 

(HMCf verifies « step. 



Is the sell®ffitt®®in tertm assoxorated wiiftltn a U..S. person'? 

RO<* 


ypo Is the suspicion of assoeis^oB ^designated terrmtist oirgsm iizatieflitbo&sed 

1 “ sd&ly <mn acfetitises p>rote<dasd Ife/tne First Amendment? 


m 


STOP PROCESS COWTtlWttlitfc PB®£ 1 E 3 ® 


NSA ©#00 at General tEanasst I 

vetr«t 9 SI/il$fc?p 



til/. TOUO) 


(U/ IFOIU.Q) Table 15 sumruan iim s tlte RAS selection tfeamssappprostid in 2013. 


(U) Table IS, 2013 n^Aqfpmwte(bK3)nP.uaS3BS 



* (LWE OUQ } Data includes RAS selection ttemBttlf^wffl^appiTOffiiti more than once in 2013. 
t (U/ trgMJQ) pat&aoOTtyy includes seadtatfen terms approved aUjuirng 2013;; ijts®dJkii9srmjlt»(ti|sle 

RAS approvals fartesarmeseltecltkMii terms in 2013. 

- (TOwaMKr) 


(U) HMC review process-20133 

(U/ fFOUO) After li^^affiposnaifelreqiijiBeKtsatecsBblithi^d in£ 


Jjautorrafiic 


e-mafflmjaiffuaaiicxinBsafflecssont to HMCs alerting them that requests are_aw alalMe for 
review.. Dqpamiffiiiig rnitthe ran temg a&aigp aifl to RAS approval requfc$tt>sih£~ 

J fqr emergency re^neats,^ 


remind©!- ee*n9M$su»6Qdnta&ftdr 
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TOP SEC«Eir//3IW(Ofl?OWff< 

]for priority' request^. 


TJfor routine requests. 


(U/irQIHimilUffitfficaimusssattffcaknt% aantiaa®<araae4$y dimrnnwntuasctifetes to the 
sdtedtinutmsitssssilhttitttHil frnrlMS affwaval; 

(U/ /TOUO)) J ustifiC 3 }ti QnassodteH / vs b u ppotr U xaetiek: s to one oftHs: terrorist 


(b)X(3)HPU-£86336 


ieaticpisscxltellysBnr 

dffi l 1 


b;L 


86-36 


organiMtiwmi listed litR 

(U/ fTOUO ) RAS ncaquHts aaBesiqganttail l±jyaredllldte smuBiectimnin^^ 

(U/ /TQUO) Source (tomimanKtitoTi iisamreinttaadd HmsnetttbbeonsuppejQdddd by 
other ikttdligBaiEH;; RAS requests osanmin ttnxieo ^eBthdo ti o n s, if selection taints 
are or were aftssedirtedi wiifliu$s®ssf(foioQi^y aasfjedfiic aantililiniiMddtim$e narid 

(U N F BUQ) If SIGINT is used asjjtEstification for IMSapppcffnilreqqceSSs, 
analysts parffenmudi pmgawEtiffaaalionss wHraueqipffefitaffi'sislDrfroirttiettd . 


(U/ ffOOQ ^ IfHHMCss determine that the domnniBaiMikni ntaquiiKmiants ttroantflt team 
met and tite RAS standaral has not been trad ssaiKtteiB., amdlyats aBtrinEtiffiall of 
deficiencies and asked to provide additional information. HMCs dpmtedfamedd IMS 
requests as “’Pending" 1 until adaquusatefly tontqjbden.ted inf - 


_^nBrotE 

] If the 


documentation requirenraantts awfietnet and the RAS atamitoidl Ifes bbeomsaHla&kl H MtOs s 
change fed-sta tes offredaa^t S from "ftaatihg : f Jg) ‘$|^ffl|jived” ifl t 1 ^ 

f’h^Jgc logsj i|h ~1 doeumehCaiJrst attain changes and tsdits of the wjiiigtimial IMS 

.analysts atid desig nated ap p ro vers. For oversight.purposeso rr 
Cannot be edited. 1 F^f^T sv stem contUidqWe that SltfC 


approya requests 

ivF Mnn bv*U*rp#*[ NN Nf 

change TogTliStdfi 

approve sdktntnnii toms instil by ILBSFfe ti30dftrEcccxiim5^CitiiBJr tktecfd^kSSaptpp>-oaia|b rpnaetss s s. 
Figure 5 illustrates the RAS Staidferdi. 

(U/JF0W0f FFgpre 5. RAS Standancd) 



(TSaS WIE i) 


(b)pHPlL.8S6336 


26 fJJ ro um Some B R trainedl altdrt authorized analystecan approwe RAS requisite and quay BR metadata. 

| Stfste111 comtmois prevent person® from submitting and appnwiiqg their own RAS reqpossts. 
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Mir 

(bK3))-P.L. 


86-3® 




M 


TOP 8ECRM7/SI#NOF01Ra 


ST-144MW2 


(U) OGC Firstt Ametmattnwrtt reommi of seedsaltetition term® assomatted witttn 
USPs-3fl»$3 

(U/ fTOOO) NSA is prohiBaiteil ffrawiessfiiMahhig^AS on a USP selectman term based 
solely on activities qratte&tddby the First Ammflmfint. In 2013, RAS requests 
containing selectman terans aswudhtteii wift h USPs were forwarded! to the NSA OGC for 


Jsent automated! oe maiili In atcbfifatktitsn to 


a First toffldraditeemjTetMwd 
designated (MifC aattunnc^si util til FariiiiAliiAmhndnteinivimvi was compkteiL OGC 
reviewed tiheRAS requests and source doaumnaarttittani, aaswell as the RAS decisions 
made by HMCs, and determined wlhdtterNSA intended te target iiMdvWdahlshaagdd 
solely on actteittiss i^oMeetddby the KhsstAmendment If there were indications that 
RAS requests were bassdd sol ely on sandhi a& tadtfes, OGC would dianytHieRAS request 
( denoted as “Di sapprovedTro- T 1 - Once OGC has approved! RAS requests 

E l I the selectman torrnssaaceaaititbdtaedclfor use as seeds for querying. 

Howewra:, a series of system ugutteitesmustt be ccamnEBst sH bMfoceaanldsTstscaiiiqisug 'rgR 
nribtadfrta 


[ 


J 


terms 


gi 


(U) Conttodte for quetrjyhgg BEHRmteSaidiMa using only RAS approved seed 
sellectfom teimrn® wittiim the autttaxDiaeeld numntissr of hops 

(iJ/ i'FOUD) | tracks the status of selection ttemssand for an “Approved" 

statu® the expiration of the RAS approval. THae BR Order specifies that RAS 
approvals sMatMIbe effective for 180 days for selection tterneii^sanahlWybtkleiliflwfedo be 
used by USPs and one year for all other selectman term®., HfexmvBT, NSA, out of an 
abundhimsx of caution,, used a more rcsStradtrceRAS expiratison qoxbiayyin 2013: 

§0 days for selecti on tremssused by USPs and 110 days for selection terms used by 
'fefeilgfii pefsofasH i 1 t is con%rat©fl to automatically oHaangfetiteessatiasof 


RAS selection terms from “Approved” to “Expired” when expiration dates NSA set 
arcexcccdcd terms from "Approved" to "Expired" whenexpiTationdates NSA "cl 


OJ -F eLO tf 



^U? fFOUQl> [j 


3ts the gBflHwQkluseietetefacc Jt fatt analysts use to query data in 


inclndtag EBRnraetddteta. When launching^ 


snse 
J an, 


analysts with 


27 


(U M)UO) [ 


J was recomliigfflKHil so that selectman terns used by USPs expired in 


173 days and 358 for all others. NSA made this change to avoid buadtoiimhitoeFISC, which began approving RAS 
for selector! terms as the President had diredtol, with more frequett reaufemizations than the BR Order requires. 
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TOP SECREWSr/JNOrO I R^ 


appreciate caialia Cbi iid\te.'Pidiec.aglt)0 n to include; BR mtatafate in thdrautefass. If 

(&X 1 }> aiialw Sii®e<tttee [ 

{b|p)HWL; 6&36 [-—- L 



tTrMt.fin Wham m tie._ _|mo<sle(d>fi|_| anallfStK stray cm% wsaa RAS 

appwwsafl sdkattontetonn tQquesy Bfinmatadabta. The term mssilj to initiate aapensy of 
BR mmfetth is referred to as a sesdUfecoaHsotit is used frojpmbktecaa “dttairT of 
.H!tetadMiar(tt(smtaflts. linmwi Eiascfimtae ihairaiiung. W ham analkaa aaib rnttseedAdebtiakin 
teffmsjfblr^.t^ryiiig it$$ilng l "I another part (H i | middfoware qaMdd 

ffiXai-P L ffijlll$hatic Acc ep ResBrnaiftm (fBVW h bfadekwlwttoh cr die setedfam terms appeal’ as 

“Apw^'Vcd ,v iriitthc l ( tables.^ The EAR, throi#i ito&tHdl srffivawc 

s^ttemedrtitrois; awares that contact otiaiimgg is restnikitdi tr»sseddahtetraifi- 42 S\S 
apptwogl by preventing; Orem RAS approved siltStifliion te rmsfamibbaia ffl^fedsas seeds 
for ©tsmituOrtii^ qdJ.l chamnmg otu^ssrs ofBR metdaatGiiiiti l l (e,g.> expiroati. 

deq oinimsMoncd' lappiapprovtdd sejoattitefl terra®, MiMtsthhehbwfi<aereibbeetfciftBteded 
mto j [ . If selaatikin tteitifissa tehiittadd bv analysts f arctuteyyiiiag of BR 


tables,,tHte EAR allows 


_ a tebritte 

metadkteflapppaaasaSA^pyed&d” in the | 
quesitestto ferffomi. Tie EAR prevents quemss fetm ptarffiaming* witathhsesleteinn 
terms dioriMt agjpaataasAgrip ro vsehI.' 1 


j: 


(U/ /FOO P) In 2013, tie EAR softrniaEsyytemitttmmte lal^stteroauikd etdethomhenber of 
hops ttfithteecfiiiiMTtiidiEsdttdrfc'OiiUQittathadniaaigi mg.,ths the BR OrderaMtoktoiaedd. 
Howonor, if analysts„ rfferTesriaowipgtttfa(t'ifirst\yvvetihppseKatti.lt>smtaiitcd gerfKrrfonn 
contaatotiammggiiaut to a third hepiftajn tltesseed sdlatalton ttenii,S£^(pl(idieyatp4titidcd 
that they fust obtain S2 dmsikan mnanqgpamMt appproab i. NSA relikti on analyatstto 
comp% \wibh SID polky-ftoo system eotnaitd! watsiinp|liiaee to prevent analysts fftom 
quesying <antf ttotblneedi dspp w i#it>la® u t S2 divibaiaan smum^maot! t apppooah 1. 


(U/ tpQUOj) To mamdansstawid how contoatcCbiniimg was pertfemiTted audtSteayststom 
controlteiirttjhioraiattidbjDyhdie EAR to om% dlt»qpffej^gguBaiggHMSippprtetedesdsds 
and within tttreeebbpps of the fflsddssidetitiortaiQmi in 2013, it is hdpdnJl ttoreeidewaan 
exampifc. 


WP) 

(biP)HP-lL.8S63S6 




(S/i ' S- i bRCL TO USA. FVEY) Seed selection term A-raaeasoabbjy ttelfewti to be used by 
a foreign {Mstaud — — ' ’ ~* ... ... ^ 

selection toil A (the free# wsmatt m&edl bbvadU.S. person. The analyst caritffcailsdtedtiion 
Jkffiiirij&in-to l ~l to perfor m contact ohaami^aan iiiVEasotwtihop from the seed. The 

IM au.temtieaUy ehi@ksd the ! | tables to detettaim \\tteter 


28 


frol'iHtfi t iilhititAlintm cd' liie'iA^I 
diligence to qui 


red ihe EHAR I | Micterc llibjj N&A relied on anaiMtiir due , 

__](BR inetaidateQi Wiiitli only RAS airongv^o rilgbl^ctioR tenrnjC' Afteril I release 

in June 2010, the EAR was reccwiiguDdl to use data fron l h o prewnlt ql'odiies in j | using 

selection terms that were not RAS approved, faariWiqgUSP selectiwi terans that OGC had not revimiatL 
2 9 (TSMHIDlir) On 29 January 2014, NSA modified the EAR sotlware system controls to medtune the mrannlbiarofhops 
from the seed to two to comply with the President's dftnective aff 17 January SOJil-tt. 
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>.L, 86-36 

u§§ m 

)-S0 148 C 30-24(8) 


seledtikmterm A was RAS appnwwafl . Because it # owaB as RAS approwsii the EAR 

JBwM the M retm-Miali 

selettiwn.tenon available m the BR r epostow (ami assoctecalmetadata!) that had a 
contcattt or connection wWlflfeseed fl 



Jitfthe analyst tried to query beyemd the 
third hop or query using a selection term that bad not been RAS apjpimeil the EAR 
wouW have pnmentatithe action. 


(U) EAR toftqsffiss 

WK8)1//Nr) Betaause.iitegantake^ 


]for system updates to complete 


before aiRAS approved salted loan term can be used for querying BR metadato. am 
EAR bypass was implemented for emergency ssituatixnss. If an analyst, with a RAS 
approved seed selection term and S214 manageunartt approval. .dfcGrmimssfHatt 
immediate qqusrpyng^oflHR metadata using ttteRAS approved sssdlssibsitiixMn term is 
necessaty to obtain time-sensitive lresaiilteto respond to an emergency,.S3B4 lirffomss 
designated OGC, SV, and ODOC prsecmiBllaffits intention to bypass ttteEMt 
software sysS tamcootrolsfs. AAftetltiri siotififiaat)iM>pS2I4 management (rantamts the 
I team r equesting tHa ttdfesimaatdd aBaidstst^be temporarily adtttstlto the 
user gr oup tR | | This allows ttheaaraftjst&to select ttfte 

thereby bypassing the EAR softwa re system controls for 


it'sttrifcthfins and checks atfRAS'sefedtifDff tertiJJS against thq[ 


tabbies. Analysts , ajrtith iiramiml. eheicks by direct on-site supervisor cawisiglht,,oimuix 
that \\) fog fc$fP 3 ,ss mile fo) not g:^ceed thgec hft M (kefefe 

17 January 2ffilW4)) o©-tw,wdiaps» (on and after 1 TjJarongry 2 014): Thej I team 

is notified wfemtltonnldyist should foe removed IfQffl the 

H - 


___ user group 

j=4rattol|iatcly following ircspseisc to an emergency gittmlronoar 


after pormal system updates have completed to allow qjierfjfymg usi ng the RAS 
appro\mtl selection terms. No NS A personnel werreiiintdddddiiiiiiliier 

mf group f l 


] 


(U) Querying by traiirnsaU and autitaiEfflod ttaftninablpiseseonelei for tesfliirg 
purpraaasss arrljy 


(S//S 1 MW) HIHe BR (IMter ail hawss autthnTKEkl NS A technical pisraminiilto access the 
BR metadata, iiiriluioliiggt ltimi^lTiueries, to make it usable forintadlliamcosan alysis. 


This includes ] 


errormin 


[ 




and maintaining records to demonstrate aum-piiiaiecewith the BR Order, 
technical personnel do not s hare the results oftfaesas queries with analysts. Tests of 


s the BR' Order ailkwss 


'■my rmwita mtm- -app^a 
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m *D) 

M3)-P,L. 


uiif 


iPup in[ 


1 can qu<g*y BR metadata ntatvfc man l$A8 apv«j|ved selgetitm 


-P.L. 8^-336 


terms in operational rtatabases. .The|_J_tt«©r groU|p is used wlyby 

Woddalnical peansdrmcl. SU audits all (spal css ppeffonrodluEitng qqpe yytotote l ?bb>tdettmiiipaA 1 
and fflPflSffl®® mmswnndl to ensure (GwraManRs: with the Bp Order, I : 1 A uthorized 


t 


ustr graupf i 


(U) RAS afpprccraij I process~2GD44 


oOT 

(b»('3)-P.L. 8t$§ 


(TTSiSj&l/i'rjri) On 17 January 2® 14, the President dfamtetl that NSA iinpibamartt 
changes in how it operates the BR FISA jmsgiaint: NSA must submit selection taunts 
to the IFflSC for RAS approval! aattti limit ©Mttaot chaining to two hops from the seed 
selection norms. Before 17 Januaty 20114. RAS selection ttamra were approved by the 
S2I4 Oriidf or Deputy tMef or one of the twenty authorized HMCs, as ttHoe BJROStdtei' 
required-rand QaaBtagt chaining was aillbmsid out to three hops; | 


f 




i A^a.iM-Aywi-'ij-.'fiT^-tiakWv iw w iths-m ui— 


teffftife'ftn 3ttr !t -Approved”’ status changed to lt R<evalMait<e H ' mj 


r 


(b»HPU-886336 

(U/fFOUQ) In the wssettas following tithe President's directives,, tthmigfti amodfin to 
amend BR (DWtor 14-01 tte FHKCajppttwffldl amn55 FEbbutQttyy2QlH4tlitj3£ofld)(blvv'wiigtg: 


(U) The govenmmstttmay request;, by motion and on a case-foy-rctifiebasi^ permfaainn 
from the Count for NSA to use spedflfic sefclecferierms that satisfy the RAS standard as 
“seeds” to query the BR metadata to obtain content dhtimrrg;infomiriuttam miithintwo 
hops of an appnmmtl “seed,” for puiptEsssof obtain irjg foreign intdlliipmee infornirnttixm. 
In additaan the Director or Acting DirmtnroflNISA may authsuiiae the emeigancy 
querying of the BR metadata with a setefltiiron term for purjpos^ of obtanaiing foreign 
in telligarme i nfcmmrcat am within two hops of a “seed,” if: (1) the Director or Acting 
Director ofTWSA reasonrdi% deteamumss that an emettgeinny situatton exists with respeclt to 
the condimat of such querying be feme an order audsffimiahggsuch use of a selectiism term can 
with due diliigmuebe obtaMad; and (2) the Directoror Acting lEtiicKatoroftK®^ 
reasomtlhly deternmniinssthat the RAS stamsfadl has been met with respralt to the selectfon 
term. In any case in which this emerrpneyyautHnoithyis exeiriiwstl, the gcweammaittshall 
make a moium in accomflaiDeewith this amendmaarttto the BR Primary Order to the Count 
as soon as practicaildke.but not later than seven days after the Director or Acting Director 
ofMSA authorizes, such query. 


(U fFOUO'l In rnopMiWE to these new requirements # the I'NSA BR ©smttrrol framework 
changed: 


• (U/ /<F,QUQ) RAS apprawaite suttmiiWddt(WtlthfF3SC NSA no longer 

approves RAS far selection ttanirm, except in emergency situations.. BfiMCssart 
the S214 Chief or Deputy' Chief pswikrasdy approved I&AiS. T¥i$qy mwpffirmi 
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only first lte\allrmYi®wssto determine whether RAS requests are adespsttdly 
docuamCTttgd and supported by creditable srauceetblxaciMimBtttHtiDmn 
\ I Analysts ffoldxw/tltih s amnion p ipnlelii m uiarp rqaradmhsras before for 

determiinniiirjg wbktddbetssiilecion terms are used by persons who are reasonably 
believed to be associated! wrilhone of the tterraristorg^iiaMkiB si i Itsaddn the 
BR Order and for documenting RAS latest s in i I After reviewing 

the supporting dbonmenhcntatipn, HMCs send RAS requests back to analysts to 
make additional ehaiigjfiS (as needed)), deny RAS requests, ©r fonanrilly ceddc mse 
them: Thily RAS requests ansteedcbty ftlMG$ ( ajre submitted in i I to 

. OGC .f®r second Jteetheview ( regauiims of whether seSetiftnn tterarasauEeused 
: (b)(3)'-^L by USPs or foreign ]jarES«s3). 

(U/flF QUQJ OGC no longer criffiBakljtyppdifbriBif i&AAendnthnbffle\iiewE'®f 
selection t terra stusddby USPs for non-emergency RAS requests; the FISC 
performs those rewikm*.. OGC now performs second 1 isetlraeiviewe 16RKVSS 
requests, soure® dtaoiMoetatitiraji and endorsensmant dkeikkiBsby HMCs to 
provide greater assunaanoe t Maatt ItbdTSSQvill not reject RAS requests because 
of insuffidientt cfoscrametautionor First Amendmartt oe<»cenBs(fdoissMetition 
terms used by USPs). OGC reviews HMC enffcisemmfe dhniingRAS 
verificattHsm mieteiugyaaK^hihlTHMdC^pr^nnewdtetencaip^pitioigiiOlge RAS 
justifications for review by SV, OGC, and the S2 Declaiantt ((iss»MIytlthS214 
Chief or Deputy 0CHw€f)who signs the evernttauil imtitioasscsdshgiflSC 
approval of the selection tteiras. This group (known as the “RAS verification! 
panel"), chaired by SV, confirms that represemtariimss iinRAS requests arce 
accurate. If the RAS verifieatiaan i^aaMilezridcmgstltfiRAS requests, OGC 
submits them to DoJ NSD for review and submissnsan to the HEHCfor 
approval. At each level of review by HMCs, OGC, the RAS verification 
panel, and DoJ NSD, all question®, ceawteenas^nd requests for additional 
infonnattfen must be satisfied requests to the 

FISC. 

■ 0 S.'/SM)JT) The FISC makes ttteefinal detenmiination of whether the RAS 
standard has been met for each ns^peStand notifies EBdJNSSDof its decision to 
approve or dihappirovK ncqqugfsts. After OGC has been notified!by the EEbJ 
NSD oftiteffiDSC (derision, OGC enters the date ©fftthe dbrision, saves the 
su pporthfe oatm irtddieumenMiiOin, and updates the dlfepasiliiDjinasobf^V&Sri^qweras 
in t l as “Approved!" an' l "IEEsqpiicwedcf ,81 FISC approvals aace 

effeetiws for 1§0 days for leMsw ttermsused by USPs and mte year for all 

’(){#)-? Jc others. How evar„ NSA established slilgfetidymKn®reoDewsffltnici \e©pii^ieat terns 

I ~| 173 days for §eteetfc# terns used by USPs and 35S days for all 

others. Figure fifsiBilaNOrKtestiTthaonMitmoTgcgie^’cRAS approval jpoocess. 


31 


(U/ fFOUQ) l 


lis the 


Ordens for the BR FISA autltority. 


systeim ofreccndl for storiiingdoainniimt.sjidlihitgito NSA authontMess, limUjuriritoagBR 
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teHSHRi- 88-3$ 

... - 



(U) Figumas 6. Non-Emerg®msy/ [JM® A^paroatelPRjceaEBBS 



• (U// FOOO -11 Bmeatgency RAS appitatvals Under the BR Order jttneNSA 

Director (DIRMSA)) are^titiiggDIRNSA can approwE RAS for selection terms 
for querying BR metadata wiflMm two hops aiTthe seed sdtaiinn term only 
after the RAS standard has been met and only wham responding to 
emergencies.. When submitting aaRAS request for emeigampy a^ppncrahh 
analysts doo mnHaitt rfebercqquets&nd justification for emergency aapppcoalilinin 
1 j An HMC perfimos a fnst-llewdl reoiae«\and requests acMirrimmll 

information ff om the analysts (as needed) and denies or endorses the 
emergency RAS request. If the HMC endorses* t Hie RAS verificadiHan panmdl is 
immediate!^ acmveeoddto review the supporting ddraattiuBUttiaonand 
justification for requesting eenaeggBoy>ap(ppwMal If the RAS request contains aa 
selection term used by a USP, OGC perfamsaafFrestAmendmentt rraicswto 

(hat the Basis fer- saakrag Ml is mi safety fea%^ @r aativfe 

protected by the First AmendteattL If the RAS verificattman paumdl camauBs width 
the HMCs endorsement and OGC concludes that there are no First 
Amendment csonc®m§,tHieS2 Declarant, BR FISA Auths^ity Lead, SV, and 
OGC will Iridf the DIRNSA or Acting iDHN^A.who determines whethar an 
anteijpjficy shmtiim exists, and the RAS stamdaudl hhasbfoeamtnaqtand the RAS 
determination is EbOdaaW solely oonFFiEfetMindidmUnp rptoattedeafctadtiesties. 

(U/ ffOUQ- )lff the id RN§& fir Acting EEJHWSVva^pprowessthe emergemey RAS 
request, OGC' saves the TOroV^Clipdoc Limutatoation a nd changes the dispaaiihm 
oftite RAS request to “ApprovedT ’IB ] l and notifies DoJ NSD ofttte 

eirocr-genajcy F&4S approval,. If immediate prqrym a is required. S2I4 
c oprdiiiata6ead d(MnthetHesateBti$editadalaistd\tfit3the T~ j user grounp 

in i . I (see Querriiing aehi xni for EAR Bypass tEO Cocefliures)). Otherwise, 

the designated anaijyfcssmust wait- |L j for a series of system 

updates to complete before querying BR metadata lushggthe 
emergency- afltp®«Bdcbeiebatait)icnni:m. 

(U/ /FOU O-) The BR Outer rnqpacesthat, witbjn seven days of the emergency 
RAS approwaH, DoJ NSD file a motkm wii blit HteFffBEConrtbhhtflfb<tfffNSA 


TOr MQKOMSIffMMFOIRN 
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concerning tBfoe amseggenpy aMbboizaadovi. Iftthe FISC graitSstbbeTratjdojOOGC 
enters tftedkeethb fI5g (apE[ppMededlid] SiBS^q , Bqaieandiirdcardi3 itte tiuppoppagting 

.. . . court docuraoiCKtitaii HI I If the IFUSC’ctibrsMes the motown, MSA will 

take moroohidl iradlufihg nations tins; FISC Itesdjrecbtdd .F{ggrerc7 7 

illustrates fetanurgeamgy RASajipawdlpp®oesass. 





(U) Figiunes 7. EmeirtgstTGyy FRWffi/^pptrealaPRxoBEffiss 



mandate from the FISC aan5> Fdanimijy 2®114. A motion! waslfthdl with the 
fl@C wi thm sayan lddgys o f the sappppsrefal ofttte emet^emeyHMS 

request.- r I the FISC approwrfUG^SSfdfetlihsdehtctioit term.. 


* (U//TOUO)) Two-Braqi restiiiotimi fhrrcoontact chain hjg On 29 laaiutaijyTIQlW. 
NSA mmtiffedd tHffiffiARs<3tti^^-eysj i ste?rDDaT)lK0 is to restrict cmniifflCt aihaningg 
to two bops from seed sritettfion fernnssaas the Pncsifaitt Brail (frraorecd.. Before 
17 January 2014, aittimiiedd r^$SA£aia4^E5s:ookldqqa£yyI^FBIMrepp0Sitdeies 
two bops from seed sdtettiom ttamssaaricboe adsMkbitulahdp plfrbedB:>be]feoifio m 
seed sdb&iam ttaims) wiilh S2 division management apjpmvd]. 


(U) Table J6 summKarirass the jwmiisiamirs rffflERQ&ddcr J3-I5Sltsr quayiiiig BR 
metadata and the ©snttKdteNSM to maratamn compllitams;. 
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(U) Table 16. Querying RNw&teMns and Controls 


(W f-QUG H 


Provision 


Seed aBfidteEtttotni tare nrru^ttea^rm^ 1% 
a designated approving official and alls© 
reviewed tto^OGC, if the selection term is 
used by a USP, before aperryung BR 
metadata far irntelinjerrire analysis 
purposes,. 


Contrail 


Jqontrols ©tisuir^tttetojree of the 


!n 201 

22 designated apprwiitr^ arfffictete apppuoe^fclRMSffirr 
selection farms and, if useoU tfa^yUUSF^ b,, OQC performed 
a First Amendment review: Selection terms were 
added to the RAS Approved ILM oiml(^ a fter the 
required approvals \weiredtora ini F 


Approvals sftnailll be given aori^ after te 
designated appnroiing official tas 
determined fflnat there are facts giving rriise 
to RAS that the seHecfen term to be 
queried isassoratedi v^tharfBceggn 
Power. 


Jteitorcss supporting <sfac^m©nMion for 


justifying RAS: iti to nnfaniTfaiPS the aut horitative Jistof 

n pow§r§. 


mzyP.L. 86-36 


NSA shall ensure* through aimd 

appropriate technical afirafl mamiagennwt 
controls, fhatapertes of the BR metadata 
for intelligence analysis pyrrposes willl be 
initiated uusirfu only a selection teinnni ttttot 
has been RAS approved. 


EAR restricts (orantiacB adtehrirm^ to only those sstos 
that are RAS approved by prevemiifmg adllnon RAS 
approved toladfaro terms (e;g)'.; expired, (is^ip®xx®aJf)) 
from beinjg weed as aafeds for conducting cxBmffeadt 
chaining, 1 


^automatically changes the status of RAS 


RAS approvals rnoiisttrTfiGm®5<]^d 180 days 
for selection terms ressBBsiniB^^ble^^eddGto 
be used by' a USP and 3S£5 days for all 
other selection terms. 


approved sdtecta ttem^frbcnm'A^ppojgedd'to "Expired" 
when ©sqDrtaBttBmn dMfessaaaStbQyNSA are exceeded. In 
2013, expiration dates were settfarSBBDGlfeqjfiBffar 
selection tarns associated witth U^Bsaadid 8tBOao(®ys 
for all! QKtaa 4 


Results of contact dfainung queries must 
not exceed tnmee hops from sesd selection 
terms . 


In 2013, tttoe BAR limited three Mite of hops to fwee 
from the seed selection farm ftoraeaanltoxttodtmfrihrgg.| 


Technical persomndl may query the BR 
metadata waring selection terms that have 
not been MM* approved to perform 
processes imeedted to make it usable far 
intelligence analysis.. 


SV reviews aim query records ffaamnnp with ttte 
BR Order.. 


* (U flFpUO ) On 26 Febnyairy 2014, NSA began sending fli^fiesqijBEateto the IP ISC f(foraqq^ay^lto 
comply with Hie Presidents directive of 17 January 2014. On 28 Febnuaiy 2014, the FISC s||q|smiiuc^atl 
RA S for a select ion term ujTdterrttlriE mw process, and tltteengcga |sssof manu ally ©iteming 

into ! . h hbtodttediM^ttlleeFfffiaEaapproedcRAS for selection terms: \ | was updated 

to require that FI$C apprwalt atetebKiiTj^tteti iirmto ittteKftesftomg seleOtcan terms to the RAS 
Approved list 

f (U/ fr(3tdiDp )1 The El$R relies on RA S approved setteEtftsxm tterrrasto be amwrraMly eertteeetl blpy 
authorized personnel manually into ! I in 2014, NS A discwetred instances of RAS 

approved totedtenn terms that were inaccuratl^iyentered imto JT 1 by authorized personneL In 

response, MSA iimol tarTertetl a two -person review for accuracy of RAS approved sdtelfm terms 
manually en tered ihrttdj 1 , 

*(U/dfF3J¥Q) | [ the expiration dtefes i|i | ■■■%!! were dnarmged tto117S3ofc^Bfar 

selection ta re used by USPs ancj $08 d&ys for all.etherfe. 

§ ||j//^ eii et)i | the EAMSSltewab system Grearttidfe vraeemmtilffe$tito limit the 

r . . itmh 


number of hops from seed safe? 
January 2014, 


terms to tWo to comply vwiitlfhi the President’s dtoctfta© from W 





(b)(3)-P.IL,8BBS33B5 
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(U)) 5Staavr|n97af ifilsBcssnol irnat i o n 
(U) Pmwisions of BR Order H3--TSBB 

(U/ fTQUQ)) Sharing Remote of intettfgemoe amdlyste (penikss of BR mtatKliaaamny^iie 
shared, ItelfiiTaTihinhiHaationJcfo ri litab 1 JjgKWtc ainadybj s i sannwgi ^ Mi Aiafoty st spte jrkyc c t to 
the reqMmmuntt peKsgramull wdh® readmeqpadijy resenlttks i marayyf<fnmfffiret 

receive aggrcqpriiase aawfeddqqataactmhijriggaaricfegMSihaBcregagfc^ii^tflpff^EQhcttiHi'iforfor 
handing and (irififfianiiiamhgg;sabIriritTfan^ata<t»a).ii. 


(UZ /rOTOi) Dissemination NSA shall apply tH^iBiraimriBastioiBiaddcl&'ssmiiiaaadai n 
requunarasniEs ami procedtanaas of Section 7 ofULJSS, Signals IhtbtlligMmec UDiiectit'rec 
(USS1D)) SP0018 to any reatites ffitemm queries of the BR metadata, inn any ffirtre Jbb&ftere 
the infoanatthni ire di ksnriiiaMdd oottttd d sNSLS A in any form. In addition, before 
disseminmfoffi USP inffonsatom cnuskfeNSMthdiDMRMiAtMlDepcpti t^iBntcxrtoor or 
one ofttta: officially listed in Seetsoun 7.3(e)) oftiSSJlD SPG®M (i.e., IBraBtttrr ofSSID, 
Deputy Director of SID, Chief oflMrfiDnmtitionSShariggSSoridess (SIS)}, Deputy Chief 
of SIS, and tfteSraifoO^pratarinri OOffere r oftHre Nattijonnsdl Seoinit^ OpenaaiinrasOeBtetrir) 
must dktemuieetHtat Ihe inf format^ USPijsredkedd to CT inforraatman 

and iiltiis necessary to understand tfe(Driirtl®nmat>ori or assess its impsitfemuEC (("(QT 
nexus'')). Approxinmasily ©wr^3i)Mdyy1 tfifd ofoirtthid^xfouatrapspahtitii at. 
among manjy doings, imdhifcs a statlaanentt of the number of instarnesss since th$e 
preceding nepontt in which SffiWihaslsteudd, in any tfonnm, reesWt s fftunriqaoHes of the 

BR metadata IlnntccmtifoilJSB Phirofontafronin ianyn fofbrmyittri tlnym®ooteidsildS/^J S A, 

(b$(9)-P.L. 86-36 



(U) Shawm® BR-wmlque nformatittm wiMhaeuIHofttecti NffittppeseotiBfel 


(TS l ItS®N'tfj y )NSA mdfos to “$0foirg> n aa sppro id dig gqqoqrynrssltk intetonibl 1 y to 
appals$>riatety tifMned and airihaiikadi D^S^ppcroonabl. Sharing restricttibnrrs in the BR 
Grder.pr% apply tQ HfijR-tflPiu c query nssnltSs o f a USP- “BR unique"’ issaa tteramusgdd 
by N&3& draft refers to contacts! Iwithin a chain solely derived from BR 

metr&ifat'a | | Oral 

or written deptutliM^ manipulations, and summatessaeu‘taalsoqqeuqr>re&sults. Unless 
altedpdy Ineltwtedltin a disesroiinlmatcd retort, BR-itiwniiqpte qo& fr results! cctiKnining DSP 
iipfemnaatitim a»£ crafty shared with 


^tdk)bdt&> 1 d er s manually chedk[ 


indExm|gl 


fc wHroHaa'eet 


ueffr 


confirm that! recipients have( 


ettewiantial. B, 


r 


in any tern. BR stakeholders also; 

BBttsure that domtmEntte corffltes aanttahing! ISR Haraqqu dJiSBPitoforaoiaiiiionrarc only stored 
in acc'esss-controlled, personal or shared netmjirlk locattfons aocesathfc ©n% .to BR- 
cleared personnel and ttta ffiRkiafoqiacicsBMts;Qotaiai[iragig US P infoonfli imi <Hipj$teyed 

in the wbplfeplace are matt wstllte to analysts who do not have) It <b)(1) 

___ 1 J lbM3M-P L-aaM3B5 

(ui /ToiJbj " r 
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(U) Dis®fflirin»6ihggBBRHaiqLcpjS! inform^kban 

(U) Dissaramnsriinn is the sharing of infomnnaton ocmtsdaleNSA. The BR Order includes 
two provisions. for disseminate mg iitffcwmmtion:the CT nexus lrafluiranaenatand the 
dissemimatimn ttM^Mag acpcjiMraoment. 


• (U/ /TOOO) CT Nexus RiequiiiKBmmtt The CT nexus requirerauaitt a^p^ikiesonJy 
to dissemannafems ofBSR query rraatohscffl<ra&aaihiggUSP infonnwttan. The 
disseminattiism ppooTikioBsof Section 73 ((<e)) odtflUMfDD SPOO)IIS must be 
followed!. If query results include USP infenunation uuirjqado BR metadata 
and the analyst nreddsto disseminstte that infomoattimn to an external ousttwraief, 
such as the FBI, then the CT nexus iraqurearaiotitmust be met before 
disseminating infeninratron in any form. However,, if query results contain 
only foreign quessinni nffoniutitiDn J liihCTTaiamircqeqeiroitedOes not apply 
when disseminating EBRi iiiltfimntitiDn. TTJba-cromtiiddeof this section f&sraeeson 
disseminating lISJPi MifioinmatiDnd dmxbdl fronB BRmiqiquei otedatbita. 


(fell) 

(blPHP-lL .886366 
{bJpHSB USC 3024(i)) 


P.t.85- 


(TSMShyp ti S ) In accordance withUSSID SP0018, ifunmihiimiaed USP 
information is to be disseminated, one of the designated! fqgf o^hbiaikhoidrties 
must determine that the information is necessary to undrasttauril the foreign 
intelligence in the report before the infamrratiiwn is released, liras applies to all 
disseminations of unmimiiirmiiastl USP information uikderall NSA authorHiras. 
The BR Order further reqqrankesthat one of the aqjpmiggalathdnritiiises ocKfeitfin n 
that the infonnitiattinn iaksteintfifyigga USP also relates to CT inforranattimn aanridis 
necessary to understand the CT information m assess itts impartaniDS. SI S 
stated that most disseminations of USP information dMkddfrom BR metadhttai 



(U/MIUQIT here are two categories oflBU. dissemnanattiniis: Publisihafl 
di sseminatiqn s|~ 

]m bMr afs¥emf^tfofes-1 e C: l g:, 


EfcjHp--- - --- t; 


external to NSA, such as the FISC, who are not receiving tihdhfifonmationas 
part of their lawful exeanttirwE o®iltepldatueeo i mrsi^lglTfiirt['otiotih.n). 

& ’Ib irfoyfij) f I rSflSferts 8ft U§§4 10 
that responfc to 


c 


] 


ate 

to act on 


disseminated in a limited diistrtfemiiocinto custametEB cenpiporeerdc 
the infmwtiktn and to additional muStonrerswho have an operattamail nredd- 
to-know (e.g^, FBI, NCTC, Qaittall Ihttdllig®w^A4©®^litCd0I)^IDffiee of 
the Director ©fINlational Hmttdlltguicce(ODNI)). 
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O (U/ iHSIIIGD ) RFfa areH83p^Bsb^usiiainwBr(«(g,^HIRJ()ribifd»Ktewi0tf:ion 
from NE£&. RFls are reqqiaeM i-eiqM|rain^g3KDfrviEHti0D epepil'cifi c 

responses. 


0 


(U/ 7TOMQ ( 
topic on 


aafe-StC3M¥. reports itot gamarallly .feclil 


1 




[ 


variety of collecttikM Mikaiitiiss to a wide aidtdiemee, Hovrn; | 

are mwc used to dissemijiroaBc HIfigPihffaB>nlaaiOTt(uniqtte to BR 


^}(3^P.L. 86-3$ 


(U// FQUO)) After @tec oftte approving authomitikss Hiisftail i mSScdfckm773B(-f ) 
oftEffiBSID SP0018 bas appmowdi the (fiks Birrinaatjiam.i , ifffifSP infoimaMsm 
unique to BR fltadadawis ffittltiided in am i ~1 it is aaud% ©Mftiiiitati 
witihliiiiiifefniatitLM from otter ard 1 tettim maUthid title s to provide a more; 




r f t,c Af f 

can be 


jlptc mi^fen 
ISPs mentioned 

distributed! miididkv and sends sqparabl^y anlHfantitiess Hfebteaee 
Memorandum <mt% to those parts of the IC ttirat nmsdl to knowttimpiMssois’s 


t 


Memorandum 
identity. T On 
[and 


Only fflktsc recipients withim the 1C' wilt® raseive both the 
Identities Release Mbmnrnffldhmn caaiildtanrnmai thd iU SPS P 


idenUty,ymititbbon:)ol>lyitfflfreiiibriiiil!tiictgiig feifciliaisjd'kfriedqiaK^tietitatltetshas 
been s^gpxiMesii %coik of the ©fficials listed itt Section 7..3(c) ofULS&lED 
SP001S.. 


(U/ iTOOQ) ) i EBsseamlatatinn offflS. informMimn oaMnssmtoEt Men in {.■■ , 

reports. SI S statofl t Hatttjegemi vhdiciNSMlidsBsamaflaSeaifnfinaTiaiiiiousti^ng 
RFls, corresponding^— — 1 |repgrt$ follow IQ formally docurarortt the 
dissenhntLiiattiwilJ 3 . 1 .JfTbis— sri+ervvs ibhc inforroaaKan refiBsSfctB % (DiKlttcoaBJoraer, 
butiimporttarttido other IKCamttoieers, to be reteas^lthhitigfcthi ali^btlwidid'er, 
albeit Ih^ilycco^oillldd^diBttbbtition. Table 17 summariieestltbc BR reports 

ifti 1913-. 


32 (U Jf OUQT Masking is the process, of using generic i iktehtEfiatitiron etemiHi place oftLJSP nannies, titles, or 
contoatuutil iddetiti&srsedhat the person's identity issnot reveaiMiiiinwrineinororal disseimiiainihnss. 

33 (U/t rmei S2I4 confiram iU than all RFls contaaraing aBRuniqqoaiitifanialaCkihihEB'been followed! up will: 

repew&p j 


iffi. Mltfk 


"E= 


NOFORN 
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(b)(3}-P.L. 86-36 


(b)(3)-P,L. 86-36 


(b}(1) 

{b}(3)-P.L. 86-36 
(b)<3)-50 U SC 3024(0 


tTOi ' /O l /. ' NO 
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(U) Table 17. BR Reports Disseminated in 2013 (b){1) 

{b)(3)-P.L. 86-36 


BR Reports Disseminated* 


Total Selection Terms 
^Reported (Derived from BR 


Total BR Unique Selection 
Terms Reported 7 


Total U.S. Contacts 
Reported 1 


RFIs 


Other 


Total 


* There were! ladditional disseminations in oral prese ntations. The NSA Director briefed 
the SSCI l and NSA made a presentation to 

the FISC 1 


I 


( TCWO l /yND 

(U//FOUO) The SIS Chief or Deputy Chief two of the approving authorities 
designated in USSID SP0018, reviews the majority of the requests for 
disseminating USP information for all NSA authorities, including those 
unique to BR. Dissemination requests are approved usually the day they are 
received. Senior Operations Officers (SOO) in the National Security 
Operations Center (NSOC) arc also authorized approvers for disseminating 
USP information and typically review and approve dissemination requests 
submitted after hours or in emergency situations. 


(U// rouo) f 



fUZ/F OLlOl S IS maintains disseminated reports £_ 

signed in an access-controlled SIS network folder. Disseminations 


approved after hours by the SOOs are formally documented, normally the 


[ 


iT l 'i Til ftCL TO USA. r -V£¥4" 


35 .1 i . i ■ ^ ■ I 

( U TtJ L CH 


(b)(3)-P.L. 86-36 
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following business cUi 5 v,% S IS. TheIMSHCSSonioRBtspOiittin£)GH&$ccnotiil)itefies 
SIS of these (fesBammaiioiss. I 1 

(bK3)-p.L. S^36 


(U/Wj ©tall, bnrcsffihgs tlhttt [include USB 8 ihftirrrraMdimn ddmeddffbaran B3R- 
unique nrreetaikltia to Officials outside Ifi®^c®canielofifr<ic|itpiDtl>tJy. Normally, 
theseHmuftn^s arcc provided "Buy NSMlfcaalteBilnip wHroaatCEaqpiiawiiiig autitairiitties 
for diissanihiaihgi USP infarnatiiori liiilhsrUSSDn) SFGMM8L All other BR 

itfttteapjwwtltewith on© tffflfae.agpr bMilug tutih@ffltitesbifef<g 
presenting itiformaawni (rnttaiteNSSA. TheCT dlvtelQhl | | tracks <gmi] 

btidfiii]Egs<:®r% aadd SI Stand S214 track all dissenranatnaarts *t USP iniranminm 
(published and(n^|),w^hhaarediiiD©ddddiiirtlthc 30-day mourns filed with the 
FISC,asstfctee BR Order requires. 


^MM^SS-Se 


MW 

{bM3)HP!L. 66 M 


(TS//SI//MJ) Missaniimflitioii Tracking Requiir^ment The ssanud peswiiaban 
oftte BR Order tlhatapp|bilass to USP inffirmaatiuinn i$s the dissamniaiani timkkihgg 
requiienmaitt mqgattiiig! ffiRiuiMqiediitiihnata(t)ii®.ii. NSA tracks and reports to the 
FISC ©\ea^’iinn^aneeiiM^lubh]^AAldksaiiniuateU£J51hIciifhnititiQri aterikadved 
from BR metadata.Apptradmrcafi% eawjySSXUdgysOGGCeqeqatests fr<ran SI S 
and &2M tHeenntnitobcr of dissemiunuttaii iTeqpBttscoomEiirigglJBBHiilsdciiiHtHfroii 
derirved fiomfflRtuniojiacmg^itddBarfcfoininput into tihe 3Q-day reports ffltedwititoh 


] 


Although no longer required to track disseminatiM® offforeign 
person ihtftrrnaatomi. SSlIAooDirinnatcs to track all dissaniinai tong oftBRa nhieBC 
infornnaiikm. Ili)lsamhlaadoiiswwa'a'ackdderfitmafflltelbi~itihl il I 1 NSA'a 


corporate cdsssennfodtioii titaatkiggtaohlmvaaiipIphiaiKded |_ 

Since tfturn,ail 1 c fikssmihatedd recpNDtaseotntaiiini m BR- airiiniEeiirfferiiiattbon have 

Icom pldtedl thee tqqMxaadiodif 

=ZK^- 


beem ttradledi iim i _ 

ft {current and fast BR dissemimatimK ihtto 


(bIPHP.lL. 86-36 

(LV. TQUQ? Table 18 summamzass tfteqrro'i'SwxniBS ofHBR. Order 13-158 festering and 
disseminating; mifomiatajii cferrvedd ffrom BR query results mdtfiaocootitatbls 
implemented! % NSA to maintain comphanue, 


36 (TSI/S l l i W) ) Since 3 SqptBntterZMK) BR Order 09-13)) NSA has been exenqpt from repeerting in the 30-day 
reports to the FISC BR dissetmiaitltihmssto the esamuti^lhnaoblfor oversight. On 3 Jamramy 2014 (the date the FISC 
approweiBR Order 14-61)) this reporting exemption was further extemsIMl to indude BR disseminations to Oil® 
legisttflike branch for oversight. 
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(II) Table 18. Sharing amoU DissemimaKimi PtrowlffltDTB anti 

ffawwff 71 


L 86-36 


ProwisiKm 


CQntrQf 

(U) itesiltte of intelligence amsltysis cpuffiifes 
of the BRSimBteuttetta m^ytesitmBBEd.ltiefaie 
minimization, for intelligence aimallysis 
purposes amiairag NSA analysts, auitejjedtto 
the reqyiiiremam that all TY^^paismrmi^l 
who rrasosix® qp^iffl^^regB^ltejiriaEn^tfi^^ fiftre^t 
receive appnoptiste tornim^ 

and guidance iregatdiiimgi the procedures 
and neesdtirbdtboTEB ftorNroiiddlilimgg aadd 
disseminating sych i^mMfeteri^ 

. „. 

<b)W 

(bMJH»iL.8B£3®6 

I J NSA’s corporate auiitthm services 

tool, to confirm tfnat recipients Hrayel before 

sharina BR-immi© auaw restJtteof a USP, In anv 
form 4 


1 

i 

(U) Before Jssainriffniatliiriii^ USP information 
outside NSA, the NSA Director, the 

Deputy Director, or one of the asffffiaialfc 
listed in Section 7..3{(c) ofSEFTOIOI 'BB 
must determine tttetttte information 
identifying the USP is related to CT 
information and that it is nraBssssai^to 
understand fne CT information or assess 
its importance. 

One of the designated (Umi£% 

the SIS Chief got Chief) verifies that the CT 

nexus has teen met before disseminating USP 
information in any form, The approving 
documentation is independently irmirntiaiiirned 
internal anTt^fto'^Kterinrall mewjiewoi/ tfcyy 

overseers.. 

(U) Approximately every thirty days, INJSA 
shall fflte vwUiithtHnheeQ3mjrtt aanaq^Bortt inatt among 
many flings includes a statement cafftHn© 
number of instances since the preceding 
report in \adhiiich NSA has shared, iirrn 
form, results from queries of BR metadata 
that contain USP information, in any form, 
with arnpxrne outside NSA. 

(U/freUfeysilS and S214 independently tadktte 
number of disseminations since the pagrasabhr® reppauirt 
in which MISA has shared, in any form, nsswite from 
queries off BR tt+Batocxpit^aim USP irirfbMiiiatfi™,, 

in any form, witttn anyone outside NSA. ST llradfes oral 
disseminations onlly. This data collectively is provided 
to OGC for ihq|njLtt iirttiDtti^33rod±^re^CDrnt^i^ wiiitrhtttBs 
FISC. 


(TC'imwiD) 


(Uj) RRtete ration 

(U) Prowiisiiams off BR Order 13-4&B 

(U)Tte BR Order na^iirees titakt BR metadafiai be destroys! no later 
(60 naonate)) after itEsimiititalifcotln 

... ... <bM3H»lL.SBS3K 

(U) NSA s BR age-taflfpatniBSSS 
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(b)(1) 

(b)(3)-P.L. 86-36 (U/ /rOUO) Based on guidance from OGC, BR retention compliance is determined 
using the date when records arc received from providers, not the call communication 
date. 

• (UA' TOUO) Record receipt date is the date on which providers electronically 
deliver BR metadata to NSA, 

• (UA TOUO) Call communication date is the date on which a telephone call is 

in 1 

made from one selection term to another.'* 


(U) Timing differences with call communication dates and record receipt dates 


(TS//S1//NF) 

(b)(1) ' 11 - 

{b){3)-P.L. 86-36 
(b){3)-18 USC 798 

(b){3)-50 USC 3024(iH____ 

1 | Because of these differences, NSA tra cks record receipt da tes for 

BR metadata to document compliance with the BR Order, f |_ 


(b)(1) 

(b)(3)-P.L. 86-36 

(b){3)-50 USC 3024(f)- 

(U) Quarantine process 



11 (U//FOUO) In September 2013, the DoJ Civil Division directed NSA to preserve all records relating to the 
colleciion ol'BR metadata under the BR FISA program as a result of civil lawsuits against NSA, To comply with 
the preservation order, NSA did not age-off data with record receipt dates exceeding 60 months in 2014, This data 
was saved in partitions within NSA system repositories inaccessible to analysts. 

(U)Selcclion terms also relcr to identifiers used in dialed number recognition (c.g,. telephone numbers). 
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(U) 2013 age-offf 



(U/F©)fcU@| Table 19.. 29113 BR/*®*G3ff ProcsaHiresss 


IWKU. 

TO(3)-P.L.j«fi-3|6 





(U) Chatmgpse that affextea±ltrtib^QID44 age-aifff 

(U// 4POUO ? la Sept<eraflfeflv 2013, DoJ’s Cidll iDmiMiiiiid-kaettdMNSAjtqjpF^e&e all 
records mltaingg tto tte aollteDicaan ofHSS. metadata umalic ithfa c BR FISA gmgrraffft aasaa 
result of civil lawsuits agansst MSAA. This ^f&atdd tftec age-off perfburatail dinting! 
2014: BR metadata tHaEKw,mkldhdravbebcen aged off to coirapHf wMa the BE (Gktferr was 


top sEeammmmmss* 

45 















DOC3D: 427 3$TW 


TOP SEC I BOWRMW QFOKN 


ST>I44NMB 


retained to comip% wiHtthhipp^eaaiataMi) DbWghtgQtion. Thi s qfeamwaassaaedd in pantittikMDss 
within NSA ss^atenm repositsar isas liuaaiccessible to analysts, ji~ 


®(i)" 

(b)(3H».L. 86-36 


(U/ /f€W>*Q> ) On 12 March) 2014, the FISCgpanedd tHK^xyecomootit ’ simtirtk) ifcfib r 
temporally rdfcffftcrm ttrtrE-ffvwyfiarclksJavtdtofinrcqiiiiikt'ciiOKEiitppcdiitf gi-eastiludifflii of the 


piEBffljs^atioH Jitigtoion find 
continue to access ffbr- intelligence puj 
BR met&fea tececcitieed on or aftefc the 
RAS appiifflwerti sdtsation termss.. 


poses itl 


A§ 

he 


ttted tto/tl lte BR ©kIm, a^ysts 

contains 


f 


010 retention! cutoff ctate 



(bMW-b: 86-36 
(b)(3^$®ULBKE3Effia4i0f] 


TTSiysy/NTfr l 1 

I I 



M1» 

Nt#3>-P.L.J6-36 


86-36 
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(before ambaffteiddtdaoDimiqaaissn^) 




8J56366 



(U/ fTOUO? Tabic 21 summarizes the porasisni of BR Orator J1B-HS8 for nstomitikm airnil 
the comrarall implementtai % M&& to maintains compliance. 

(U) Table 21. Retention Provision and Contrail 


(U/.IFSW-) 


Provfskwi 

Contrefl 

BR Metadata must be desttw^aM nollafeartttonfi^e 
years afar . 

See Table W f&OTtttepp(meeldiuees p^tonrraeti tto 
age-off BR metadata to comply wiitfru ttlreBffiR 

Order in 2013. 


(ll ff QUO) 


{U))OOMsr§b$ht 

(U) (Provisions of BR Order 1I3M0BB 

(U) NSA'ss OGC ami ODOC w.iill ec«S£«rectltili&tpt®rKe)®nmet l vtwtthaaceess to BR wattaitote 
receive aippncqpfiate anliittoq:i(iaatc tminimigg Emitlgtiialianea'a^alwhigiLlhiitpiiisiiaBrlid'tJKeandid 
restrietkM® fbrcrailhHtiinu, Steuagu;, dissamnnrtatibaii „ anil rnttertiwai of the JM 

metadata anti the raesiibs of queries ofttiuc BR metadata. NSA” s OGC atiiti(5HS8£’wjJil 1 
further ensure tteft dll NSA parsamBil wfc® receive quarry rasadte in any tfeirm first 


TOP SECREWSI//NOPQKK 
47 




















B0C1E2>: 427Mm 


TOP 3 ECMEITMSI/IN 0 FOBS N 


ST-144BM2 

receive a^jgitqcpii&e aaMldaddqqaM etnaniing gaadc^mMBJKiEgacxini^nyieliij-^etiiiitfesrcBidiii d 
restriction)]® tfoirfcmdlngt arnil diis«OTimtting!^8abliiTirtbiar«rorDn. NSA willlmaamtamn 
records of all srodfa traiiting, OGC vwlll pro^^IBdJNSEOvi^tboppses of all tBamrdl 
briefing and/or ttzahihguimtttriHlals (including all revisions) used to brief/traiinn MSA 
persommsdl comminingt dhkaxuHtrajiiiyy. 

(U) NSA p ss ODOC will 1 nmmittJo ri ranp^oraoUKidnmod)Aiuse oftite softwares awl aattterr 
controls ((iimHicdng? u$siiaatitbatitkladfflnse90iivBsds)iiaiithdi4ofe@i§gig of auditatte 
infornudixan EafeKnosdd in the ipn^auEsppmgppbh- 

(U) NSA will (OTaineetbaai au auditable raomdli*sgptMcafi4ddwhbuee®iei' BR metadata is 
accessed for foreign intelligence analysis or accessed nshg fdireiigin i ntd'H jmoc e 
analysis qpar$yt<bofcl s. 

(UlMS^’sOSE’wililfcanjsiddihvjtHtlDDoJ NSD on ai significant opinions tdtat relate to 
the intteanp&talioi), smpae, caiiHdniitepJdmmatibMn oftliits authority.. When 
operationdllly pamiindUie. ssiofiiccnnalthadnnwilllhfflammiadffdnaacattliiahsriseisflcIDoJ 
NSD milll be notifiM a»ss®an mpaaibaifiic. 

(U) At least ©msEdfohmgr tHec auttlmaiezation ppxtiwdd, NSA'ss OGC, ©03®C , DDoJ NSD, 
and any cottar appropriate NSA iKprnsmtiMitTCeswiHihieiadofotiid'iaippopese of assessing 
compliaroee miibi ttiseGSonit't’srdEdej's. Included in this. meeting will tearemww of 
NSA”s cTOjuittartiiig and assessment to ensure that wd^tq^cov^nttalMata; bebtgng 
acquired. The ntmlbs oftHiss meeting will be reduced to writing and sitimittedi to the 
Court assgsatt of any 1 i^tticcnitcto aierei^v©ra^mstiaieattiilianahthril^i ty. 

(U) Att least (omcectiurng. tHte auttomEKtiam gsriindd, UMIMS© wii 1 buneetvitfa fch th e NSA” s 
OIG to discuss their (sweaissyittra^pnsiiibilieKsaraitch®ssgsss NSA f ss compliance wiitth the 
Couit”sso®ddcss. 

(U) Alt lhaaatonneal dririg gtlthCciaitbajiaaarionppdddd, NSA ff ss OGC taniUDoJ NSD will 
review aassonqlie of the jptfflffiuaiintis ffor sfcforsalddirdsitetDimKsejied to 

query the BR metadata. 40 

(U) NSA owe«sg|ttt 

(U/ /FOU 6H In addition to the oversight requiresnentts Hkttsdl in fine BR Order, NSA 
perfomnnsiffllildtitiannhl oyeerbiijht.nBC rwtfqireicfcd in the ©star, to ensure compliance, The 
organizatirams sa«dtH«xxyecs^b|hpqntfoftnndcdraidedc8biabedeKCxt. 

(U/ /TOUO)) BR FISA Authority Lead is tilrcf&ail pnintt ffiar the BR FISA program 
within SID, nspatihjg to the CT AMuaiaec H^ppnyy IE)reem!r,\\iriiafefBpitH‘ts to the SB® 
Director.. Tliec BRFISA Authority Lead'fesreappoaSiliitietesinidolDlaie: 


40 (U fTOUQ) As oOSl March 2014 (BR Order 14-16?)) the FISC no longer require# OGC andDoJ NSD to condaimt 
periofe reviews offfiAS appim\tfhlseleotii®m terns. The govennuiBitt sought this change as a result of the Preafalfs 
directive otf 17 January 2014 that NSA submit selectman terms to the FISC for RAS approwail. 
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• (U/ iTQUQ^) Chairing weefcltyy IBMDiraetitigig 

• (U/ /royOi) Eimsoni ngapppoppiritaepprggnaiuldxscsitti®mad $ i|D^ap-qjrpg®ginim 
functioning 

• (U/1 TQUO) Signing NSA's declaradmaiBS to the FISC during renewal and 

• (U/ /RMM)) ) Emrnuiing^tblaattHie BR aiutttomitiy' is wadi as (tetmtetti in the BR 
Order.. 

(U/ /TOlJ@ ^\Wefcl^yIBMDiliBajflkig suartodldl d to discuss BR ffl^iyirggiiaimiaim’C'iictics 
to ensure compli«so£ wifeliitttee BR Order.. TH^anhiddaeppemetaitateses fh®m OGC, 
ODOC, TV, $W„ GTO, OIIAai,Tl[I).GoontmcttaiTDiDirieniPRrddatiitei®tCGcntdLS3il.I<J)IOIG. 
and ffither organized rants ihwdktctl in the BR FISA program.. Agaraddasiadflhorefecsrarc 
maintained tfbraiadhmaetitiigg, 

(U/i rOTO.) Authbririties Integration Caroup (A1G)) repontte dinso% to the B2feppjilt>y 
DIRNSA.. TTbcAMKSvwMtdir&rdyt^ AssiAasaeaBacedaireta orate 

authority leads, including the BBS. FISA Authority Lead, ardiHwltiiswwdekjlymBetitiggs 
with tteaanHii®i% lteddsaaddfloppatatprpare^totisadsg|.c.'fP,TIP ODOC, CHSC)). 

(U/ 7FQUffi The ABEfGamees on the aoikitiles ftbreaatihu a thbri ty,y,bbeltlinterenataindnd 
external, to ensure that tlhe^’caea-ootddiait^^diaifldntngrarQticdcaoKe dS5MsA. The AIG 
acts ass a "‘ffocoigg ffimrt(i)Ufi > \mthlhil\INSAiifjilatikti3Slgiielidj8ais8ionna)rigTihcthc 
Directorates to p ramirattc ciabbttuc nuductetaratid in g oflitnw decisions afffeot t Htcvaaidnu s 
authorities. TTiteeA^<BGapqbatateifcdjll3epapyLiI>IIDtIRMS^iiaaj;teErtjer]y on each auditorily. 

(U) ODOC In 2009, NSAeiKEattedtl&bcppeaitiDKDfKiSatector of Compliannoe to improve: 
the Agemey’ss ability to keep NSA'ss activities coimsiisttant wmMi tlteel im'sppbiieKStuadid 
procedbnas «ks^uatl to protect U$P privacy during SIGINT audiirfifonraBtion 
assurarosssimisKHtiHS. ODOC lltassppediitirfiiioutdSitMisv'Uiithidie BR FISA jprQgmni 
outlined intfneOriibrr. The Assistant Due&tmr for Special Compliance Activiitiies is 
ODOC's repressnMiiiwa: to the ipMtgiom. Some of ODOC responsiilbiillitiias 

include: 


• (U) Involvonumt in all daritarams mllafcdd to the . 

• (U) Eaitiudipfliiiigg in weekly HMD tmsslthgss, 

• (U) UDpterthjg BR FISA pragrram tteamhjg inuttotid], 

• (U) Participating’ in quarterly compliance lmsatngssvAUllliQM JNFSBOtndid 

• (U) leading ttlte verifioflram of accuracy (Vo&))jpDfi©sss. 

(UZ /fOliO) The BR FISA program has heenn dksgnaaedd aasppccihlcomsp)bihaoecaatitiffyty 
(SCA| ahuK2Bti99thlttaisi stmNMaAiiffl8sk)nccic^it\yitddaoiiin!dtlcd to require additional 
tailored aampllkKeessd^gguflids to ensure the protean km ofttlSP privacy. When an 
activity is identified as an SCA, ODOC becomes active iimkllaappecis of implementing; 
the SCAumtll ifliisdiceamiiiQddtltihaitit is suffidatt% nmdaiiptinutti liyytttec 
Comprdhaimvc Mksitnn Campliamaec Program and significant risks Ikarwc been 
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mitigated.. , IIIteGSaninp|D^hhQHi3i® r eMiti^oiCfepijdiimd^d^Kgii^oprdOTd arfmih«WH»bork 
and strategy to organize, govern, and nsswrce e»jrqpllrance ;«atMtties lsoksss NSA. 

(U/ /TOUO) An activity may become an SCA when: 

• (U/ /MIHS )) NSA°a external overseers (^eg„EBdJNSSPFHSCCfitgrgKsis!ii£l\ave 
a heightened sensitivity about an activity or the unmans %'wMdiUiNtSAA is 
executing an activity; 

• (U/.- fWOI) NSA” s legal, policy, ciMrapliance, ©r oversight elements determine 
that an activity requires attention to understenmfi tfine a^Ubsatctm of compliaime 
measures and gnatMratdi^ll risks;; oar 

• (U/ /TOUO) NSA iitextiffess aanaattiivtyy aariptaeess ttoatnia^ybbcDOtit of sync witiii 
oversigllilt and camplliance tfcgrollalHms andlgnllbiees, tlluKS makiiitg NSA 
vulnerable: to compliance inddsmt&, 

(U/ fTQUQ) ffltecrognizing the critical impmttaiEBe of the asanpifettaBsss aantl accuracy of 
documenttattiifflm Unfed with odtamril entities, ODOC dtewdhqjatii llhisHyyliliinetQioirtaerey 
procedures, known as VoA. These paaiadiirass ipr^vdfcgccQEacrtmsifflmrit-ahtoittltibe 
representation]® MSA made to external overseers are accurate 1 iautibbaeddooiii atehaxtd 
understanding among: operatramdl, tectaniiolL legal, policy. wd aOTnpUkuee affiinhfe. 
NSA uses the VoA process during the apphatirom process to the Court when 
requesting renewal oftite BR Order. 

(U/ fFOUO) OGC has spodiffieftariaxim tttee BRFISA program outlined irautthe 
Order, One requirement is that tine OGC cerassdltt with BMJI^SD on all rigntifficantt 
opinions that instate to the iirdepiewatirm, sserpK.omi liapidomatatado n of the aultllnrfi$y. 
The lead <QK3C BR attorney, assigned from .January 2®B to September 2014, stated 
that OGC ©OTsnJte with DoJ NSD on all significant ropinjons. OGC saves all 
cotTo^rondence discussing significant legal opimikons wtiHiUM NNEJD in an -mmm- 
controlled network folder, 

(U/fF OUO^ In 2013, NSA OOC met withDMIMaiDaaldasdsbnaffididtagigatdcBER 
authottauiram perainS to review a sample of the justification® for USAS approval!® for 
selection ttamssuisedd to quety BHRmettataftaa. However, as of 28 March 25)1141 
(BR Order 14-67), ttefflfEOnddiaggere^ DoJ NSD to conduct 

petrarfltc reviews of RAS ajipasMsdi sefeEdfem tennm®. The gweammuntt sntgHtttblnis 
change asarasultt of a January HU Mppeesidatitihlddij-ctiMa'endul'eivhiMclNNSAebQgan 
submitting selection tferrms to the HEBCffotHMSippproalal. 

(U/ /fG4HO))I hiaddifioon to the OGC® GEMearBiigit Lreqqirbiramt § i feddi liithheQSddci'lhfee 
OGCdeffinaf its EMFISA program responsibilities as: 

• (U/ /FOOJM^ )tAddfalessaiggilA 1 JdgghlqpsSfewiH s from BR FISA pragrram 
stakeholders; 

• (U/f fUMflE)) CiantlinaaiiiggihlinitBteintctio nvitlit D<Do81SCSD; 
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(b)(3)-P.L. 86-36 


(U//Fj MiE H Coondiinaiiigg thetfllhg of®ft4d$ry reportss and remewsed] doemimonss; 

Leading* qwaitte% coorapjjliiaitceeittaitii Do! NS©,; 

(U/ /FQUO rt Pettfeomiiiigg First AnoaidinKMit revikxvss ffor USP RAS approval 
(before H 7 Jamuayy 201#; 

(U //FOUO)) CMfflfiinaiiigg RAS reqmesss and sullMriitiihiggtbham to Doi NSD for 
appn®«dl by the FISC (on and aftor 117 Jamuayy 201#; and 

njp 1 ' 0 ^. s-i^^v. rt di «r» R fl i is 

the|_ | List. — 


(U/ /FCMI®)) SV imipJkmMKstlihc SldMT corngdltaKtee program aotass NSA, 
patti iadkb}y\\witjniin SID, enabling tlhc SKaHMT mission to operate iiiioDmp|)iiai®csvi¥liitli 
law®;, pdnaeiss, and other guidbmffic. SV prmiiftss gtridamee aa®ssstlbhiglg)l&bai; iSKSirN T 
enteiipTsec, raarasgass eonnnglIimaeci madden t s. mow tore csawgHianee in higfo-riHlk area®, 
readkfOSppj'bfeloKi s, and venttites tsonppliom: ehlbttgtogiits ke i vis ksdacd i t s, and manKqgrtg 
the SIGflMT 1 rtell 1 geertecOGteisfgighOffif&ccr program. 


im 

(b)p)HP-lL. 86-®$ 




SV padatnssttoomahino®s®tgighfufttteede r&rftheiitc BR FISA pr<sgrcam: 

(!!!) mm a&iitg accsssbby verify ing teaiiifiggreqqimiimrtMts seimi-\wefck>ly for persons win® 
have the T credaniid 1 and for persms itodhdfcdd in the FISAflSR user 

grp.iap in [ and (@)aadiiingigiHill BR queries penhbrmdd usiitiftg query tools by 

uii#innaart dettoktitpirporeetiiodv«o tycri fy conaigdliiainec wMi theincppararmrira t s of the BR 
Order. SV”$ process for veriffyin^ ttitihirigg and mangy mg aaceess can be fbnrnil in the 
Access and Traiiriipg ssedtion. 


(TSJSlMvWflJlAs tine BR Order reBjufoss, whenever BR metadata is aafflsseddfdibr 
foreign iintdlilggQoeciiaii^iys i s or accessed usmggffeiigigri litaJ^igcacanalralysipuioivcry 
tools, an audiMbfo recoctd of actiratfy iis^oneitatfcd. AMtisugfo not migiiiokdd by the BR 
Order. NSA audites all query records. SV veriffiffistHMtool^yiahdoaadcpbipetwiiireithvith 
the iiea^iiiirddcca'ddohtlalqir^tiiedicd BR metadata, sele^owittenmaatstth foiqajcry BR 
metadata for iiitedlilggcnECiiraigiysi&'awcrc RAS appwsMadd at the time oftheqpeyy, and 
quemssfob intetbyegefjceidjtaly sisnainsali n ed whfltin theauthteiedd nundkar ofHofps from 
RAS appweM££lj sseddsgsaSidie BR Order requires For the llasittwalctetesks, SV veriifffees 
masuEd%ttiMthfec EAR softwares w^oiroo trot s o Is are wonteiigt as inteattfafl. SV st ated! 
thrift has; mxm- f&iwfl an in^am' @f the IAR 1 ~~| 

allowing amnneompljtiiant query to coMgdhtee. In 2011,1, SV audited ail I | BR 
qusnjy nteaedd sftfc th tfcgfejyear. 

(U)} Addribandl SV respnrafoiMtes indude: #9(1) 

{bK3)HP*.JL.affi3K 

• (U) Eimiimgg that SID indidbmt (rapports are etttorad fenetyy im® NSA’’s 
cecjjttnaate indilkiitrpppnitigigldtatahase 

• (II) AtsssBtiipg in the afcrabibppMMJnt of oversight and cow^liaweecoo rases 

• Profiting BR query statistics and | | eiogfernitdaHagdidatfofor 

msaitHliy ma tries repotts pswiilfedd to SID leadansHjpp 


{bK3H».JL.N 
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* (UP FOUO)) Maintaiimihgtttea'ooWQtitciarid asaatsss to the SV BR ShareFointt site 
for stfiriing fflRFEFS^ pptxgrram dd®EimroitmiiHii 

* (U /fFOUQ -) Perforating \\<^ftfoBet®m£imt saaBggrafed to SV in the BR 
Declarations; and 

Itt . 00 ^ IN"” (bi(;) I 

-—---* LlSt (b)(1) 

(U /lTQU Qfrln 2013, SV also assisted BbJ NSD in its {periodic review ef4SW- L86 ^ 
approved selection terms uifssJitlhTc^imcyjigglBRinstleldaia, SVpoviifedl DoJMIID 
with IKASfeiffl(W9r; saarid aifppntihgi diuttunmlfiriaxan f<t>® icaoblraviemv. As 
previously mentioned in the OOC (EteTBiglitt smtianj, tttffipnri'ddidcrffeieraws offfi^S 
approved selection terms mfaiffiJs^ttnin^i^iisKiiaatt to BR Order 14-67, 

28 MmA 2014. 

(UZ /MHIffij) TV is responsible for iiianiftyiig, asasssang, ttcadhiig .aadduttiggtatigig 
compliance risks, imcfladlhg USP pjrwaqy comneerTHSj ii iMS& Anmrasii®nsy yffimsi saaoness 
the extended! enterprise. including, systems that hold BR metadata., TV nranqgsstbbc 
system ctanpilta-raBc GsrtiffeaatOTn ip-oressspootitinuowscomp^liiBiTEananjtiiDtiarigiauiahid 
technical aarniflihancec inuiittatt lmain^eamam aanki CKHidkinte training and awareness for 
technical gHnssamreiJ. TV attends the BMD weekly meetings and pJBifeunnts VoAs flour 
areas asagnnaii to it imn ttUne BR D©clar<atikms, 

(U//F ®fll i @))) OIG conducts audits, special sttudfes, inspections, investigators, corafi 
other nocikw^od'lifagisMaHrsutthdpEpatktnsns ofWSA and its rifflliaees. (5ME avemjdht 
includes: 



• (U N F OUO ) Performing aidltteaamld ^pffliidlsfitiialakies of the BRFISA p®gjram; 




Pth, 86-86 


t 


(U//R0HDO) Meeting wiitti Doi MBS at least (murcdiuiiggeaKjHi BBS. 
authorisation pstnied to discuss oversight responriMitiks, NSA°s compliamiKe 
with the BR Order, the states oMOEi reviews,, aantii iintpaintartt de^kapmuntBs 
affecting the, BR FISA pi](^mni((irMUetfi1miitihdi,esQimd(agiigi'ai«kstatitiBritBttedi in 


¥ 


• (U/fMKBOf Receiving nntiftiaatdxran of incident reports ffiartdllNbSiSWiathhritieces, 
including BRFISA, saved in the Ag^oiujy's corporate: iodiitetift ropunttiiig 
database; 


* (U//FOU©| Reviewing CongnesHknri] Iteiifoatianss aaudi npikss filed wiith the 
FISC of incidents of non- compliance with the BR Order,; 

♦ (U//FOUO) Preparing Intelligence Oversight QuaffitteMfy RepomisR. in 
coordination witth ttte DIRNSA anitiG8B3C. tHiatsEummnozccoannpjhitiariec 
incidents ffimdll amdltanitties occurring during quarterly review pammtfcsaaiiald 
forwarding the reports to the Pteaidkntt’s Intelligence Orasngfotf Boatd through 
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the Assistant to the Secretary of Defense for ImteJIgpaim: C&vuragiitt 
(ATSD(10)))) 41 ; 

• (U/ fTOUCM) Perforanihg IO reviews dhrrnjg S3ffijins,p®Dtt(kiHS ofjjhntt and ffidld 
sites; 


(U//RS£#0f Attending weeslsk jy MtDDinaetMggsfifwKfidaaatiQahlaawffi'Qffls^s; 

(LL WFQldO) MairaffiaimiigthhdDffiMrBiEitihiaiataridejsppniidgig to complaint!* of 
violatM® of law, milk, or regulaimn (ttfeOKSadteo ihwastigutess ailhguticras of 
SIGIMT mikim; by NSA affiliates operating under Kite HMTOSA SKHUMT 
authority)) ;aaidl 


• (U//FOUO) Reporting immediately to the AUSUSIPS)) aiclkvadhqmOTtit oorr 
circumstomca: inv-oCviugg an mc dlli ggnas' anttMit$y OTintkHgfinoK psrBsamidi thaat 
could ihrapigm tte iieqputtaKon (ariiittqgrijy of the 1C or otherwise call imt© 
question the ptrapiktty of an ikttdlligence adtiroiitty.. 


(UNffflffiffi?) The CMtffi reviews managemarat contcok, maintains awareness* of 
compliance incidents, and stays informed of changes affecting r?f®Aaatiltbciitiaes, 
including BR FISA. OIG reviews of the BR FISA [program aiDkawv it to independently 
assess ©snnujriliaiuEc vriittitfctecHBR Order.. Since 24 rMtf^'22M6thhddatc the Original BR 
Order was sagiudl tfte ©Gubha so Dip jMtetot dfifie cI^FB A^pipgraire ra»'j©A's . Table 22 
summarizes OIG ttewiews oftthe program. 


(U) Table 22 . OIG Resiiejws offtfhe S^FfteSAppxxggaavi 


lU/rrwilIJWj 


ItSUNi 

cf?H<tRey iew 

Scppsjsf the 8&yit.w 

1 J . V^. 


09/05M 

Assessment of Management CtattaJte 
for 1 mipIternirnirtthncB ttte FtSC Quetta: 
Tetepta^y BR (ST^JWHDtiaE)) 

Reviewed collection,, processing, serta^B$s§, 
disseminatan,, amidJcDOTEi^ 

05/12/1® 

NSA ©nmtrols for FISC BR Orders 
(ST -1HDWDQ04) 

Reviewed querying aairifdfe^ 
summaraed pilot ttesettressultte fairJtauaaipy 
through March 2010, 

05/25/11 

Audit of NSA Dmttolte to witth 

the FtISC Order Regarding BR 
(ST-1O-0flMML)* 

Reviewed querying aairtiitfissseim^ 
summarized the 

10/20/11 

Audit of NSA Cmnfttralte to Qmmni% wilth 
the FISC GnatoRfh^ditiigg TO 

Retention (ST-11-0011) 

Verified age-off of BR FIKSA rntotaitada in 2011 to 
maintain compliance with idhe 60 montth 
retention requirement* of the EMCMta. 

08/01/12 

NSA QmMs to Gami#% with the Ft BE 
Order IFteGpntirnjg BR CollecSran 
(ST-12-tjMHB)) 

Reviewed collection and sampIS^ooiiiifEctWisfta 
ensuring that NSA rag^iAfis&oo^ 
metadata aautaiizeeld l%tttaB®ro©ide r. 

* This symnnf^irrasti rmn^ of the BMop^rmg aairddfes^agdon 

controls during 23M3D. 


(iJJJ /ffCfeiO.lfc t 


41 


(U/fFOUO) In 2014, the ATSWM) was chamgahto the Office ocbtthe SenirarDoD IiartlIigBiMx(5Ji"eejHi^hOfficiiiil. 
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(U) EBsternal oveitkgfrtlt 

(U) DoJ NSD is the liaison between MSA and the FISC for the BR FISA program. 
DoJ NSD oversight irndtanttes the following:: 


• (U) Coordinating W-4aay renewal a^liMtbms 

• (U//fffSSf®j) Providing puuibtnne to NSA OGC on all signjiicant ksgall opinunns 
relating to the interpretation, scqpe, and imj^tarantilitdon of the iRiautihniity 

• (U//#8&B0H Reviewing NSA briefings and tnaiiriirg ttsMscipptsto ensure ttoat 
they accurately atessuite the requirements of the BR Order before NSA 
incorporates mrntBiyiiintidK)iiiJsttaaim^ppng^m(^g.£jySCI205, OVSCJ206) 


• (U/ /FQUO) Meeting mih NSA’s OIG at Host amoe dUning each BR 

authorization patikcidl to discuss oversight respcmsibiffities and NSA sampiltanne 
with the BR Order, Proposed imtiktims aanddo (hfiehhppnftalntlaisL^ojnpniQBts 
affecting the BR FISA program an$cti®ms®ai with the OIG 


(U) Meeting with MSA’s OGC, ODOC, and (inferMSAstedhdhaJHfens at least 
once during BR authorization perirods to assess aampilmnje. DoJ NSD meets 
with OGC, (DIDKDC;, and the BR FISA Authority Lead to review the Qwterly 
Compliance RqpMt liM sunMnaria^ ttterasidlEsof weekly teats MSA 
performed to ensure tihatM&Ais receiving ®u% Mtifiiiiaed data. DoJ NSD 
submits sinmnaiiijK of these mriBBttirgss imwithiugto the IHKC a® paffl of 
applications to renew the authority. 


fFSirai'/MH In 2013, DoJ MSB mat wiitUn NSA OGC and SV at least once each BR 
authorization femarflto review aaaampdteof the justifications for RAS approvals for 
selection foam® unseat! to query IBR metadata. For RAS selection ttann® appswrail in 
2013, DoJ NSD sampled 100 percent of the USP RAS selection terms amd 20 percent 
of the foreign RAS sdtecttiiom teams. As mentioned in the OGC Oversight secttMam, CEfcdJ 
NSD and OGC”$ periodic newiiews oflRAS selection ttmms wene stthramtimusil ipuresuunrtt 
to BR Order 14-67, dated 28 March 2014. NSA uxnw sHhbnthssddd^rortdHrmto the 
FISC for RAS approval to comply wiMhthe President’s January 220141 ddiredtsiee. 

Table 23 summarizes OmJ NSD sampling oflRAS selection terms approved in 2013, 




(U//F©tt€^fnMdle 23. Dad NSD Santis of RAS SeJectiom Terms 



• fliW TOUQ) Estimate calculated using DoJ NSD sampling methodology (sample 20 percent of 
foreign a^teodtomn ttens for review). 

? p/J/ /rQUO) Data imrtliJtlissRAS selection ttemrr^ittrattimF®y (beam 

2013. 
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(JJ/r fQUIQl) ODNI repres£Httaii\ess aatbradd DoJ N$D meetings with NSA'ss OGC, 
ODOC.. and the BR FISA AuttlhM% iLealittoreewewtBib iQSJaiaetiy] \C6i®|riplk»ciRifceport. 
Although ODMII does mat Item ddbnaia Iraki daicsitoelolcd in the BR Order, it psaitiisiipabss 
in its general role asamo&'meecr of IC aetnkiidBss. 

(G'fREL TO USA, FVig¥)) FISC is £UEnnlnlcwnifM11 reaE, 

amendmittmtte,. lKimstateraoms of the BR authoring', ,afflak,l, sitatimigg in Fdhmiiatijy 20)1)4, KMj 
for sadboticm temts l^SAssittecniintdd .TfTdic FISC approves the IHRFRiiiimn^y (Skltas tfliat 
authoiiiae NSA to acqwiine buulllk BR FISA inettialiala aaddltbd3 BBS &xndaialpry)i£tedcrh£ftliat 
compel) pmwaktestto pumitik dfe% HaiDfe BR FISA metadata to NSA for the dbffiaicnn of 
the Oattor. The FISC paifforros ax^Bi^tbljyreedeiirigiiJfifiKggs oftRilfe 13(a) Matrass, 
Cormcttiaii ffl£S\Mmnafe)FEcdstsaiah(RBlBld30(jbNNimscE(iI21selnsure otfNNb®iHGBmp^Matm;c, 
by DoJ NSD on behalf oftWSA. The FISC aits® re^ikovsstfthdOQftl-aiayenawal'a 1 
appliemtikiaiBsttadd)G44 a FP e P Rr ttiiafeat NSA files. The 30-4tfj'rBpD)(i(n ildocrmittnt NSA 
applioiliKtan oftttte RAS standad)(ti(!)Ol(kiggcapplpd$eaMtei' Mmfti 2014));; NSA'ss 
implannmtauwE’i aantfilopperbtio n ofttite automated) qw^ppTOees^®4otag^caf^did$t3ft8ficr 
March 2014-NSSA never imjpteroate dd thhq3p3 , oe«ssiialii'dithiJhiivcws Kscjita^acst to do 
so); NSA'ss desaiiptrani of significant dhaigess imttfee wayiniteilublitllibe BR metadkta iis 
receive from pmvitlio'S taaaldstgu i fitiaraititc krdaajgn^sc actotlab lc <eotirtiloi I s NSA has in place to 
reedve; store; tpraesss, raiitidfesariuio&cBRftimatteataaik^hdie nomiber of instances 
since dhcpreceddkiggreppcc tthhat NSA dissemiwtoA. in any l&trm, ESPinffiuranatiDn 
outside NSA. The 30-da^r^p»ttsaMsoihnlildde NSA'ss attestarimi ttett the CT nexus 
was completed) and) dissenmimtimns rweeapppmeeklbbyt dd^ipiicmgiigppiDpvmgng 
authority befoiecdiseciniiiiaatigig USP informadmi dkfived from BR-ueniiqate metafetta. 

(U) Table SMsmmmaoecstHfepprdsisiitsiis of BR Order 113-158 for oversight and ttinec 
controls imj^tetBOtEtddb^y NSA to mairtanki anmnppiaanee. 

(U) Tablte 24. Oversiy^IPBTdsishsnarGchSolQtitabrols 




Provisifiim 

Control 

NSA’s OGC amrotl ODOC mUl ©imres thatt 
personnel with apar^y access to BR rrrmelladlata 
receive appropriate aimd adequate traiiimiiimg and 
guidance mine asiccld 

restrictions for collection, storage, aimal^si®,, 
dissemination, and n©ten*Bim aEffttlnas ®RnnrototMto 
and the ira&ulte of queries of the TO nnnettadiata. 

See Tablle 141- Access amdJ Training Ptaffiisnns 
and Qmmtrdls. 

NSA’s OGC aamati ODOC willl ©irsaireB trt NSA 

personnel who receive query results in any kmm 
first irecawe a^aflTrsateaaold aafeftiafe tainrirng 
and guiidanKce rBBprcblifTOg tte|^DJCBittues5 sainatt 
restrictions for the Hiarmdmiirni^ aardd<±tesisffiirihTi^ of 

such ihitorniinaBion. 

NSA will nmeiimtaiin) nesramote of all sudfn training. 

OGC will provide {DM NflHDaEqpteof all formal 
briefing and training imtaterials (including all 
revisions! used to train NSA personnel 
concerning the authority. 
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NSA's OOOC will! monitor implementation and 
use of software armsil ottneir controls ((mrllijnblhrog usmr 
authentication services) aantlttlnsB logging of 
auditable inflation referenced atox®.. 

SV performs 1M peircemt audits of queries 
performed raim® query tools by mission araH 
technical peusoifnirtol ttowrffythh&too^ 
authorized peirsonimell vvltohbaeetlfther^ppiiriedd 
credentials qpniertl BR metadata, s^terttani 
terms nisei to query BR metadata for 
intelligence analysis purposes were 
approved attlhi® tirraeof the aumdi cppsafraess 

for intelligence analysis purposes remramsif 
within tftn© numibeir of authorized hops from MOS 
approved smds. 

NSAsOGC^IItcmnmiJtt with DoJ rftiffiD) on all 
significant (opwnts that relate to the 
interpretation, scope, and/or implementation of 
this authority. 

NSA OGC conlmmed that NSA has always 
consulted with aimd neaped advance approval 
from DoJ NSD and the FIISC dtefoBe 
implementing saigrrnilicairiitt changes to the BR 

FISA program. NSA OGC saves atll 
correspondence with DoJ NSD in an access- 
controlled network folder.. 

At least (omic® (dluiiinn^ aoLattcorrE^tom ROTiimil . 

NSA’s OGC, ODOC, DoJ NSD, and any <Mmr 
appropriate NSA representatives will rmes^tto 
assess Q33Ern[||dl®nmDe wvtithmhdDSodffe'90(i)d(i®ss. 
Included in this meeting will ttesaneaweawof NSA's 
monitoring and 3 E®s®sssnrmeirtt to ensure that 
approved rmeMato issasccEppiiFfesId. TTfte Fi©smitfe of 
this rmesstthrag will dcB 3 res±iliJD©$jcltdiOMKiftiti ggaad d 
submitted to ttffoe Court as part of any applliicaion 
to renew or reinstate Wm authority. 

DoJ NSD meets wiith OGC,, ODOC, and the BR 
Lead to review tt^ Compliance 

Report, which siuimunmaunizes ittree neesailtte of weekly 
tests pCTffaDrinnratl ll^NMBAto ensure tail it is 
receiving only the BR meitadafla authorized iby 
the Order. DoJ NSD submits summaries of 
these inn^irngs in writing to the FISC as pair! of 
the applications to renew tttn© awltoortiitty 

»|-P.L 

At least damas® (sttuffiim® ttlreeaaUttcnrresattfirn ipeTiiBHi DoJ 
NSD will rrmffiffitt wiiWHi ttteNSA'sGIIGtoaHfflniBSs 
their respective oversight responsibilities aimd 
assess NSA’s compliance with the Court's 
orders. 

NSA OIG musette wvfilthDoJ NSD at least omipe 
during BR authorization periods to discuss 
oversight respenisiWiies and NOQte OQphfdtance 
with tHne reauirements of the Order.. from 

these rrn^nn® aaeecteimrasrltotlinl^ 

At least ©ncedijmgtltea^ periled, 

NSA’s OGC and DoJ NSD will review a sammplte of 
the justifications for RAS approvals tor selection 
terms wised to query the BR metadata.. 

In 2013, If^OMTaaTOtl SV met wiiHTi DoJ Wm) 
at least once diuirrimg peiribds 

and review asenraplte of the jjitffitiflESttaiiTB ter 

RAS approvals for selection terms uussril to 
query the BR ram * 

* As of 28 March 2014 (BR CS>ctterH41-®7)}„ttin® Fff^rrrolJt^ OOSJCattririclDoJ NSD to conduct 

periodic reviews of RAS approved sdteta terms. The government sourgjtitttttisaiterogpe^s^ressiiltli 


of the FPteaiiterttfe January 2014 directive uniderwhialln NSA began subrnniitt'ing aaBSterltom ttemrasttotltte 
FISC for RAS approval_ 


(U /f fO tftfl 


(U) DERRHFSSAAPIPog^atm Indbteartfes of Non-Comndiamee 


(U NFQliQ j FISC HSlU te(:xtTifoaBiMBr{recpfj oiitii 4h M SMSt&prap d'tiofte^ieaiio nforaffamileri a l 
facts”’ ami “disrikmiues of non-tssirr^ltaiiDe*;'' wvitfi IRKHTGStdicrs. NSA alls® must 
determine \vilulHOTiQSo@gf^«oailah(nofifktii(t)iiHi sirarceqiqraded. Our m^ikw-ftaaiuscld on 
the process for iidkenttifying and ltqpmtiiiig? iinditiantts of non-compliance, the inddtomtte 
reported iin 23)113 to the Cmwtt tmdioBhheieeKtiaiiilaiNffirecMej'^urdidhiia'CiMttffihlNSIAAiJias 
instituted to mitigate recutTetmce of compliomae ineiidtoittss. 
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(U) RSC miss of Procedure 

(U) The FISC Rules of Procsdlus;, II Nfawoiibbcr20®0O,addp(^ to 

50 USC. § 1803(g), governm FISC proceaidih'gfs. Rule 13, CommatmnofMiisslatemsnt 
or Omission; DmdkmweeofNon-Compliaime , is the frosKEdiuectltiaat NSA follows wfluan 
notityimg Kite(Cantfl,ttirrxiHgbliEDo J NSO„ ofBR FISA misstatemumts awidcoorppiittrecc 
inddenotte. 

(U) Ruitellilta} Correction] of Mattoriil Facts I f the gswerairawnt dissBtmis tliaai tea 
submiisaban ttaRttVee Court (amtdiradiaa«is6fl^teBTenbio®miB983rori of mateniall faefl,tte 
government truonsfitimuKniidiaidy. in wriiLiinr^ inffianmttteeJid^gaawtvhontlVheiihjbmesiKwrawas 
made ®flf: 

(1) (U) the mmisamtaTTBiiti or omisstsm: 

(2) (U) necessary conueaiisrres; 

(3) (U) the ICaate and circwratntimx ralfcivmti l ttotHrerarisstsltilKnnctn bODWHsieion: 

(4) (U) modoficattoans tthc sgovmnimoti Ibha s mMJiooopptpposcs to make in how it will 
impkimCTit£i3[i>yaatttbdtky)icai3tp-pKai\iirginti(rded by the Caautt; amii 

(5) (U) how tfec sgowittnaot l ppoppsee sttaldpposc of or Gntcat iirftbnnflarlhonabbtmDddiaa a 
result of the tmiMtotimiamt coromiiisfikin. 

(U) Rate 113(b) ffikdteure of Non-Compteaiuse Iftttec governmiatt diistxwai® tttatlaaijy 
authority orappBuwdl sjiamtaUUyyltibe Court tafistteesn iirr$lmTC«teld in a mramrontiaitldldifliot 
comply wiiHitbbe Court’ssaatiltbdKiaiitioiX)Oii|appm\tabiowUtithi[S|pliiKijit[iblilalai\th<ttic 
govemmant nramati hnmddialhly ,i rin writim®, Worm tilhe Judge tt© wflurm ttesuttmissBMJiiwaas 
made off: 

(1) (U) the imiaiHfionpjliaiiDa:; 

(2) (U) the ffiktte and dimumatemees rcblsnaatittto tUse non-flasmpHantaEc; 

(3) (U) modiilfkaittiiaiis tlhe g^mmiBOfi lbhasnaddoKprppspesefiotenarhakc in how it will 
impliomCTXUOTyaQthhdtUyoonppprealakigiif3iintbti\bth<the Court; and 

(4) (U) how tfe governmentt ptspttsfss to dispose of or tent i iilfornanibon cxbfetmcddisa a 
result uffttenMHeomphiiwtcc. 

(U) fdentm^i'nvg and Reporting /ncidemfis olf Non- (EinTjctitoraee 

(U) IdenUiffytrigg irnaedefotsts of noiKBanrtpfjfiaGee 

(U/ffiQ UO - l NSA typicality’ dSs&tSMaiBS ihwsJdoiBtsotftfinorotoopi ptoaBoe i dvi th et h c BR Order 
duri% its (ejparatuni of the BR FISA program. EBeaasise of the program''s sensittiraittw. 
suspexa&di aimmiAiee s aaea-eppttetibd io u t of an abimdaitite of caution. Traiimingt, a {pill tan* of 
the ©anpiltaKree ffttaiBewrk'lc pptwdkkss helgji^atehcsinsensc of awataaresss ffmppcrsondekto 
identity poianiial violatfcms of the BR Order.. A second jailter, mnmitttrrhgg awfld 
assessmailt, itintlial&eananamlalurditb<tbtihniL'afcntrolBO l s to deteat ahammdittees. A wsdt% 
BMD meeting;, attanikld % BR FISApn^aan^tsdaJldldW^r^rpTtdddtafaifiiniifiCDrfor 
addre&amg pataniadi 1 ipabfel tms. 


(Uz/FOtSdU When a possiitlslb; imdttfermtisisldtsrmredcdtt is isomrmimiimtealcBb tbetlBFBR 
FISAAuilfetityyLfeaddPOGC, ODOC, SV, Mad, if appropaikee, TV and S2. BR FISA 
program sttafkdhd liters inaeetct d idiscu s Ehdteidtscm Aidb ttadireii swi tlv (Si OGC’a 
cofiKuttmuuec . whkdtben pcpteftthtli akwMatio n of the Order ftHBouceoitata'dd. If OGC 
belioffls an into (dent has or inHy/hkae®ciaacutettd(?\<m:n if all the fadfsHwetnoobitaen 
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gathered, prelimwaiy nottifcucimm to DoJ NSD is made shortly afar notice to the 
DIRNSA, other IMyA 1 fcaaltebipp, BR FISA pagnaam saKikdiidlteBS, aaiiH CMS.. QLjpnn 
receiving initial notification from <DGC, DoJ NSD ataittsdiid'ftmgg aaqraHiniraayy 
notification to the Count!. 

(U/ /POOOT Once ttteffaxtss taws.’ tiBBcmggdiihBrdd aiidtiJDffitliiwHiniteja'nMn ttialli a 1 
determimatdiaM thafi aawtdhttom of the BiROidlarliiaiiOcanBtidOOGErfiifeiizea a 
notificaatikomn ofiiKDomoogih^ m ^ aiia ^df ( St)TOa , tiid sitit to DoJ QQSQkvd'hcth irtidtesstblacfTnidl 
determinaiiiimii as to whether ttlBTBcliiasbbeoiriiatiiiiidEittnt of non-compliance that anmastt 
be reported to the RSC. IfEEtoJ NSD determines (that an incident has wounmh, it 
prepares a draft nrartfimaiiaii to the Cmittl, cooraffikafess to ntKifticaUonwkh !NBIAA, 
finalizes the draft, andlfflfess to notification with the (Gnuitl. 

(UZ/f CWQfr IlM.1 NNBJDaftfiotfi fitea pjplxriiinan^i rpouificfitiettio Rt/itiii t tfidiC cG’KFtitrtimli d, if 
needed, will follow ufpl laca’ivAdtlBtWdiOiotdaliatofifkatimj In some ceases,tltee 

preliminary norificariiimin of an incident serves as to; final madias:. More tom ocnee 
notice to the Com to address an incident is typically required wHtcm alt to tf mice of the 
prdimmary Mttffisatiiini: 

• (U/ /FOUO)) NS A does matt have all] thee to® threGSanrt nssriis to fully 
understand or address the incident or 

• (U. 7FOW5 )j>- BtoimtiM] ffiillBwenmatit)Oimap}bbgiaeidiid. 

(U/ /F(HgIX0>)) For the four incidents <rfimanvoronqHiwjecfi fkstnrpprtedci to the Com in 
2013, two respired additional information; therefore, final ltwttiices wcaie filed 
separately.. One of the totfe mrs mdl ittehaaimiriiidee of material misstatement! foeear&s: 
NSA ttiad previonsly filed a afadlaraiion to the Cfflwrt that ©onto mob irnaemnaate 
information. 

(U) Conginsasiiwralf mot tffesa toms 

(U// FQUO -1 In addition to the requirement to notify the FISC, IGllRMBAlihasia 
statutory obligation to keep the Senate ^totQoosnrtttaecooridteHiygaceeaaddhdie 
House fftoirmcnemt Select Committee on Intelligence ft% and currantily irotfommuil of 
all sigrrifcattt intteliigonisc adikitikss. 42 NSA Hsesdtes (faith®aitooidttnodfifiactationirin 
favor of notifkattwsii. In addition to notifying Congress and to; IEimtttoTocKflNrniiJiial 
Intelligence (DNIjJ, DIRNSA must rrMii^tHrclJtodciscmtai^y of Defense for 
IntelMgeimEffi (USDfll)))) and ®tor(M!SB(J) sJtdTfaailSH^f )ggiddanec directs.. For ai BUR 
FISA iindifentts of non-compliance reported by Congressional notifications to the 
intelligence committees NSA also irattifcs (the SSmMeaairil 1- Hmise(Dnmmtnitttiees asm to 
Judiciary.. 

(UZ /fOdS^ NSA”® Legislative Affairs (Offitec ((ILA^linaaiagge^SISSA’s liaison with to 
Congress and DNI, IMEJ. tottC^aanb otetr U.S. government departments and 
agencies regarding mutterBS of concent to the Compels. LAO is NJS&Ss ffedl pBnttffbrr 


42 (U) See 50 U.S.C. §3091, as impleimemteflby InteHigenae £ 0 )ifflnwinlrt\CElirctitia'd 1 2. Congressional Moriffmlimn., 
16 Nov©Britair20J L 
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Congtessfondl iinBjuriuss, canrofpnKteeoee^qa^tionsfdbthdiceDa^rdjidifiF^ttirdcitedted 
to NSA. 


(U/ /FOCWS>) ) M&AfRdii$y 11-3S5, Relations with the Congress,, 22 JlmilKy 2MJ5 .ppnwidde s 
guidelines for identifying matters tOiatOSMGiadiiLAQQiiiistiebasiirlsjidtrepiapdrgng to the 
CongressimiHl] hrtMllgpniee c^nrmifttttefisuiittder 50 U.S.C. §§3091 and 30882. The 
gutdeSSmes do not constitute a comjwdtanBMa: Hist of what mtust be reported. 
Compliant®® ibnniihntts aiecaasaeseddinddea gcgBaiffit^igduEidaiic to consider Ifbr iKqpoting 
mattas that tJte’ihtfeillgence committees hm® expressed a ©sirttiiuiiijg ihtbresst iin or 
which aatiunwiise qjudifjy asssjgiiftiaatit i in£ttdilggeacaiiaQtiitites.)ofc(fiiiili(tBes. 

(U i rouoi NSA works to keep Congresakandl iintd ) 1 gwiiceeomttMimueesftflityyamid 
curramt% informal] aSKMDtHKA^gonyy’scQctiinurimtmottaiitilisflija’iiati'iieiiicKpdiraddtirdcr 
the gwiddliines (outttiiuiti iim NSA/C8& lftdligy 1-3®. 

(U/ fflMffl)) OGC's analysis oftthe inddemtls ofiwcme'ompbtts^alttebaMUiiirded in the 
BR FISA [program in 2013 resulted in three of the flmn inwdtaMsrefpwttddaas 
CongnessBKMHll mstifFaatbms.. 


(140 2QXEL&(lik&ii&entl^oindCiBnflfttea€iBce 

(U/ /rOfcM g>) In 2013, NSA irejpottoii fftmr incidents of non-cflorrptlioiicce to the Court. 
The following are NSA’ss reports oftthee incidents and the actiono® NSA took to 
mitigate nsouramee. 


((TTSGH ' lIhy^ i ll[ i~NoHm~H!f CMi|ptiternee Inddfarj-j—- 

f f 


■f 


(WWlf -L- 86^6 


vi mvvvvivvnvvmvv 


(bK3)HP.lL. 863636 


| alMSfr;Vd iiM^ysi conducted a queiyy of the BR metadatas 
with a RAS approved US, person selectu m term (the US. person is current suhj-ecl to 
Cowrt-autkmhudl eilmitimiiic smirviHtlmu l: , 

J I 4-he-^mv ftuldtsd l fcfeirt)yfeftv bblfciteBl 

Ho be 'u.mtihf the saffieWtS. piirsm as rh'e selection-ntemv The amdissttfimmswihfho ^eD \ 
U.S, persoifl idBrtiffwrq.Jfajrffijtsitheitasking,, to an e-mail aims tdmrimtiidddcNSA 
personnel- who. fogd msttm^fdkted //ier required BR metud§qta training to receiv e queihy 
results contemning U.S. per.mm.iUMtomdatmi. The anahstt aim tMeied tyhe t=] W &ktifiers 
into certain aiwiftic and taskimg tmdk-to Which NSA personnel wiitimtttthe required BR 
access. 


(TS.S ' ShSNF) The same day, the analysts NSA supervisor fkahze’k thdirlhe fi | 

U.S. person iUkntffiershhdd>een shared, within NSA, with analysts who had not recekmd 
the training reagmined to receive them. The supervisor took steps to immedmtdby dtetmkk 
the idendffiknss, dUitoteth em fjwmm the analyttk tools, and recall the e-mail message, 
processes which had been successfully camppiteddon or about March 22, 2013. The 
analyttk: caniditakUqgiboMshhddmtmeiddio collection (miT&sMts.amicktfMmwqpwimall 
wav sent to all addresses on the e-mail alias insitmmting I khatanymae withmit the required 
training shomM desttmyy all copies of the original e-mail seut to the alias. 



notification! was required Ifort this 
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mn 

(bPH°lL- 86-36 


(TS//smHff) Controls put in place ttofimt^gaieitreotrcmrece The BR Order requires 
that reaiite of queries ofTHR metatea magybbeshhiaatidaHraoggNSMiiBaigfbjtstfofo r 
intelligence an^sRKbletdOTarniii^^ to the iromjixti^cm®ritit tHaataWlNS&A 

personmd] wfiro receive (psri^reesilksimua^tfomifthst nffitffiive ^pprapikte aanfl 
adequate training and guidance ffiqgatdng! tHu;iyc®eddiieesaadd'QXtricMxtimi^lTfohdraiiiiiirig 
and disseminating such inftinmjatojnn. Analysts who run queries asmti Ptatamitsailthsam 
BR metadata modwcaMneiaiil (©ASSOilf® tteanihg l&jgariinjg the rules anidresatirciatjoRS 
on sharing BR metadata query rasallss. Befome analysts share IHRditowddqJiiBcyy 
results oa rnttahuMaj ULSfPi attfcmatatinn .tltfoevmnttsCQahinfinntltha tthh eatnoiBiunhibatiith c 
I ) credential to receive BR metadatainffammarimi AitalakystsuaniEtMimriBd etb to 
verify r^ipicmfs citato date j I To help 

mitigate iKSLureroiec, supfnjmitaoreitarQtetfcd to the analyst ttSuciBiquramaoiSs 

for sharing! BR metadata qjpucyyramhk anddllfoeppaitio as of the CMCSU2155 tnaahih^ 
related to sharing. 

■Notice-o ffCeamnoliance lhmitendl I 


(jTi$ i /Ji&!K (VP) | | NSA I technical ftwwmmdldahscwveedd rlnioul! NSA 

Unit had mmhimtmdh nr&mindffties (mxrdainpigaibikddlmlamdirdiidhcttewsm>motieiithtiia five 

{b)(J3)~-PlL. ®6-36 [rears old Sp&cJflcaMiy, thes e cal!dktttiihvimdis, \NiiidiilhaUlybemppiHid vedfiptttmmnjio 
the Cmurtt'is Pmmjy 'Qdtom;;, I 1 These mill detail 

rmmidiswc re canwmltkxsmimddiiirmnmtuPiinirtJiJ ils migmgtvtfwn of call dkltait mmnctts to a 
new symdm ] I See Fteckmtmm, Dnnckett NhmhwrlMl 

..10-5577 at 13 n.8 ((dimatiiiiirfg rniigyiwaimu offrectmh to a mpilmcmmint!ssyMm)), The call 
dmajil records could be accessed awumdlbfyyon/rfytetckhimblppemnnnblxahh*) had received 
^pipifopfikjte and adequate training to access call delaiil imamds.. 

omm mi I NSA technical personnel destroyed the call 

detail nmrnlk used in the migration of records that had heat inadvertently retained past! 
the reitmtmm limit offjmepymm. As a remit of the destrmtmm. NSA is unable to provide 
an estimate regarding the wdlume of data destroyed. For mommy: hack-tqpgmgMM&i, 
NSA has retained ttlhtmazdlldfatuilreeooddswedfimtkbemiygntimi of records that dliMmm 
exceed tOtem&ntlani llimiil, and will mut tiinwjimmrdls imaaaanditntm; mtHithke 
requiremmts of the Court's Primaly Orders.. 


(TS//S1//NF) On 7 May2ffilf$, MSA sudjmtt4dd iiaQxwnggeKsmniiihlnodtiiftaabtrn oftlhe 
compliance iktdidaitt to the ffiauacPBeEmmEsntitSSldceCfikmittatasn dn thhltk^iijBfflcthe t he 
Senate SdkittGSomritteteroaiiiitidilligratcctuHltdlriiHMisusoidt-fife&flBdtbiCmntmstaas on 
the Judiidaijy. Copies wflrreaWsopravrdidd to Congressibimil affSarisDiffBeicatatfidic 
ODNI, USWli and Bod. On 7 Mtqy2Hl B3 , ttiremSATDOOiQttfifc of 

the inddartt aumd (Omgttessramfel iTOCittiikkntion. 


(fepPFRt. 86--M (T31I3® MB) Conttotslte put in placattombitigatfe recuarositee In response to this 

incide nt, technical p ersonnel developed a scmiptt that «janites ffor ingest aandbbakkpp 
files i i jl I servers arantahimiga BR metadata cxlKMcithliaii'o&iu lypaars, 11 months. 

Before ttire presarroatoan cmdhrr, if such Unites ware iiltatiitf ridd, tHeessripp t wonidd setonki 
automated nanrainriktiffi wadl% for three weedtescinridtllhoRladliylymiitiihdiSlSidKiiidife(been 
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manually defcttfM Nk> files maatiliingi rtteca-riteiaaHMvdb beaactot(Mb diaiac^i^he 
SfiHptwwas develbpEt l. Beim: rite pprDsmmattii^ order; tfline l I datafease,. mHiirth 

I servers. 


readied the i%e-year annaik. NSA midiitmiinns 1 foefitoanresBttirio dost sfdbnimdig hose arahd 
dlreetouiks that hold KR-tedatedala flies.. 


(T&IJSHlMn Notice ofCompBamBE hitMntsJ 


[ 


H= 3 i 


11 iiiii hi. 


i 


(TSmbVWjV Fieiim i n ary [ 


NSA informed the 


tfSD '$ Office oflntelligence (Off that, in the course of reviewing itsjfamm! iraipmvmg to 
tfl&ffffgb, iitMMdentijkd §R pwatfala 0vdmts a,§.ntaWpg U_$, |potjson jil fmmttm HhU\ 
it had mtmjwmd m thimv-dav reports to fhk Court 


For each BR 


<b)(ir 


metadata jpmdhan, an authorized wffiaiai made the required CF dtilwvm'nmi'am prmrrto 
dikssammtitkm. NSA and Of continue to investigate tike foots amidm-mumstomees 
concerning this matter and the EMI hi® ptimiMk a thorough axplbmattbni of this matter to 
the Cowi? _ |b)(3).F»,L 3fe$S 

| t rqv filled with the Court. The notice 

incffcaied \ | in total were not included in the thirty-day 

mpjMMs&geamLeiitfe Him the Imldmts tmmm( F~ I NSA relied m a 

single individual to keep reports of disseminations that occurred during each mqpmtiitfg 
'jjefftmfl andJtQ provide information othmut ttkme dhsemmttitmsffirr inclusion in the thirty- 
day reports. imidtiaittwrifLy]lhd disseminations dlmtriibgfl above \\mmntiumi 0 tliktlwntt, 
as result, nmjfmnutiim idtmailHwnmtiS "imttimdkdhd- <pi the thirty-day mmrtts. C urrently . 
as discussed in a notice in this matter filed with the Coutt f 1 /V.SA 's 

Information SShnrihfg SSevivees(ISS) office maintains memm&s of the CT determinations fur 
each dimnmimtudl HiRnmMdtkia product amttomihg’ IVSS person ihffomuttom. NSA s ISS 
now also \wtiffms ihheaatcmmsyofstatements me^mdimg dissemiimtmm 
in each iihmy daty repotrtt by confunmmg Iihatiitsinsamlkre0ectthe number of 
disseminations demnUmd in each mqpartt. 


fTS^SlMNF) Along wdthtteffmdlnDtitiee^assppjtdimMnalal-eptp-otbtdidiedBiDiuptrqiiM'eilied 
addition®)! datafeamidd NSA's attestatwni tfitaL, 

informatiicsrn was detenrriiiiiiad to be related tto CT infomnaaiaii anttineceessasrytoo 
understand life CT infbimaSkn or to assess ite impmrtiaaaee. 

-(TO/VOL'/Mf)) On 20 September 22U B3 NS&A subwittedd a CongMssaimall ntniflfoaiibQn of 
the esmpitaniDee imdiikHit to theffims^reoinna®^ilSSidneC<EQmiiitiaaan4iitdlitghi®epcc, 
the Senate .^krtCSonriititteoioJiitot^hgcfticmidiiddlHtihkB.tsiiKlaiSdn'ataifloiiCtiinaaktces 
on the Jhdiiriansy Qopt^sw^ei-elaibscpfamlsibdotalthCStgigsessiiahalfMfeioffccfficBs at 
ODMI, USE)©), anil Doll On 112 Septenadl!iar 2 £)f) B3 ,thbe NSA OIG malftedl tills 
ATS 0 OW&) 2 dbmtttttedttniddi«itaad(hqQtdldgig^ 6 hgrgEe 8 sialialotididiiiQfi.on. 


43 (U/fK OLSQ ) On 21 Mach 2014, theU.S. DislmiatCourt for life Nortfaiin District of Califomikiissued ® 
presemltom order against the detonation of BR metadata 
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- fW/fi|I// N Pj Contnodte put in p Hame to miltigptte naauureewee In resp«Mme to this 
fcfeideikii r I nSA issued the 'BR FISA Reporting Process SOP' 1 ' 

that documnsmitts eeatonai 1 reppwirigg reqq Ltbiotitih! suahdrgarg tatiraitad 1 i eds posipttai hiM tics 
and dklftnes a stamfotidi cacti, reppaathfelpipcsecsfofobdkceQteatiocpcfltioi^iiioatiaiiitdand 
release of maiadhttm^y FISC repontsffortHihe BR FISA propane The SSIPsstMeshidtati.sas 
fS-tfS part diitteident refflfflfafliiation, the B R program p urmriitedd tooigfifi a (thtfun wianlisiprot>o it 
pro<£SStsaadd;iBa®tc ft safeWiaos t<rofc. lf;j | to Ihdlp automate accomntihig oftBR 

EISA disseminations.. 

(U// FOUGj | I nSA^s corporate dits&itrinaafeieintitaofckiigigtdob 1 ,v\was 

impkmymtetf in December 2013. Bdfente dis&ammatitms \wer artK&EkfedianaalljLl 1 y. 

Since ttimt aHl 1cdtseoiihimttd-eppiM~t sldoredcd from BR meftattada have Item dnanttenij iin 



(b)ID) 

TO(3)4p.l, 


hi ) 1 r*F 

$8)(3)-R.L. 86-36 



JJVSA mteim/il 1 

1 £3 M )ke&rd§ fyr tmttiii tmw&ml \ 

mm mV 

j 2 

1 

-wi 

'hm , vf 

Lt Mffltid friiT” \mU ^mUimmdds £ J Prior- to 


was stored at all times on servers 


(MM63)-50 USC. 3M]4(i) accessiMe r xniiyto technmdl persomndl amldwas not avaiUdk for mlkMfgenweamtytysis. 

. NSA and Ofcontimme to investipttte ttkeffmascimiiiicatanimtwaseeottomnn^npisthistitmtter 
andJlhe DoJ will provide aittiwmpfehexplamsiitm efftke imilttur to the Commit upon 
cmnjp tat (h til of the investigation. 



( i DS ' /i ' IIZ/NF) On 17 Deeantiiar2M)33, NSA submiitttmil as(CmijgeesbonhlnaofidfeaitDn of 
the ©aniplianaec i mmirldon ttdotltb(HHosesBeReniiiiattefifeiSd <^tM> iGhmobm ttee on Intdl%aiuee, 
SenateSSdAcc06nramitti 1 1 ee on Intdl^mee, tisnaktItfetHfciiH^SicneinSeSarmC^^GianiiittBittcos on 
the JudiidHtsy .QBpjpk’s/avcrclsal^a-fpriitettlcd to the Congresakandl idffeirsifff&cat atodhc 
ODNffl tanldUSKD()l). On 2 Decembea'2E(lB3,tH®e NSA OIG mmifeeti of 

the kiditkm taad (japaiidgi ‘CGtgrgsfissiah aiotifidftGJit i o n. 
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jnte ^ 86-315 

W6!)-50 ilSC $fo24{i} 


(T3//STjfNH)) Contoaite putt in place ttonotfi^&terafemrwKrece NSA filed a'lNfeafice of 
Material MkRatterreaitf’' litmuses iinaa jpravmuis d defcjaa&t ionto the Court, M£A afla tto 
.that it bad e ?pp#cd|9tgl|rei#ve. s$ntMgplc i~~~~ 1 ^ I 

: mm notif y tile prowlers ttHaf ii 8$ not wa nt 
ify f . I A§ 


f , j pf ^ *** Saj JS .MiilliJ 1 ¥ **■" 

| f®r testing anil that 


G§|LI Mkwation. ^vfesvas Mpfe abfe to verify 


am implementing ©©Misti NSA nmdlftMiltltbavay it performs tte Vi&X&ni tttoe 
datalabation to the Court so that all organizations asswedhttsil vwihithbifilBtlFBSA 
pa-og'ram pHUftieiptlte in the VoA process ssmidl mfim the entire document The BR 
HSA AutlioirifylUtail jpittSated piarterily mesiihggswitlh s&fedhridtes; to compare ioe 
(I’eviifttitis flfihal Effl Order nHtth the JMw declaration to identify dbamges aontoil cosaiueetHKtt 
the new (fecchiwat ion is rod e wed f or amoo/racy , Since ithe incident, NSA has not 


tne new dtccimrationjajmp 
received sampii ^l | i 


records 


an 

P 


(TS//SI//NF) As UrfStussad in the Sampling seafont. 
feed daily and weekly to verify t tot it does matt 
identified no CSLI data since the} 


t&s't th&[?j 


cantam 

j fet 


As 

CSO data. 
Ifeed became 


TUteEIk&sr- 


(U/ /FODO ) Hlhc faur imocddstSsof non-compliance «w incladJedl in NSA’ss ffnsat, tHiirti, 
and fourth quarters 2013. Repmttto the intelligmim OvernightBommil on NSA 
ActwMass. 


(U/ /FOUO) FFoiraillfetoftthe incidents ©fnKoiaHnajqpliianQrffrom 2010 through 2012, see 
Appendix B. 

(U> NSA Use of tttn© BR FISA Autttnartityy 


(UZ/fOUQH AJllliMtdii no formal paxtasss tats beam implemented to assess the 
effectiveness of the BR FISA auttoiriiiiy, NSA asserts that tte astfanSfy Haasmasdie 
valuable annttiihuibnss to the CT intelligence raniia8Hi®M and titettiitgikvys am itrqpmttmtt 
role for NSA intelligence anui^atte ttasitetl vwimitonttfyh^pptflBtitihlct^ordHlisttiiitteEsate 
the U.S. Thrtmdkniiland U.S. interests abroadl. 


(U) WMtobddsU&s&tfbtAssess EfFecfiwennssss 

(U) NS A ’$ IHS. MSA ipitgrrarn wwtsdd®v<Hipi®dl to assist tfflneU.S. government in 
detecting amrnmimtotimss btetveemlhmwnor suspected ttEnnmiffltB ajprEaitaago otsidde 
the United States and others inside the United States, as well as communications 
among a^pnattims ^hMntiiaeUlJnieddS&trtes.Tlih^^Fl Commission iidtennttiiffiiail [that 
detecting and linking $mdh raimiirmriiiatiffliK as a critical inttelliigBiffiE gggpili the 
aftermath of the attofes « 11 September 2001.. 


<bMD) 

(bP)>ffiL.86-36 


(TG//S1//M1)) Based ami naapiestts from the Senate Select C<n rnimrniii ittee on Intelligence to 
determine tto l ‘Wlju£ofthe program,” NSA and FBI personnel dewdtafcd iinFBibniaayy 
2014 the “BR FISA Bulk [MaudhiKi M&MHMI Rrixiiosssfor FBI Feedback” pfem tltila&t 
describes NSA's ree^pmraMiipy to deliver to the FBI spreadsheets wMd 1HR 


informati on and the FBI"s responsibili 
.ferFBI’ss 


report as follows: 


% 


to summarize use for NSA. The plan caDted 
to categorize setedtaw terms in the MRfHISA 
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• (U/ iTOUO) Not ofihttemttseisdeoftion term istmdbiiicd% ftewssB wttte 
characteristics irafeE iitvwotHlisss ffinreesaartih. 

• (U/ 1FOUO) Know® to the FBQ-FE8I is aware ofttie selection term 
independaffl%. 

• (U//FOK®) Eniown to the FM with aMsmmA\ informatiMi-F-FBI is anmanec of 
the setoram temriiiiiddppoddetlj1,y,bbuNlSI^Aep(fpdrtj3ig)ipKidedeaiBpiiiii%S'ig 
mformatSonn to aid FBI investigations - 

• (U/ /FOUQ) Unknown to the FBI-ttobe FBI mats mot swans: of the setesian 
term. 


UnderJthc plan,! 


1 would send BR-uniimtc lloafe to FBI field 



(b)PHPh-886386 


(U//¥QG#) BR FISA pnagrranm lhadhreiiifp macggnizes tHatt ttflognae iism© process to track 
program effectiveness.. THegy agpasdl on the wsdi to track effectiveness but mens; 
unable to determine: how to do so. Feedfadk iisdifffkuliit to obtain.. Onefismator BR 
FISA program Itasfar asked, "How do y®« assess t4teedf&ttve<n»ess of an arottfomitty 
when was don’tt get ffenitetdk fronrai the ciuisttonMQi? ? ” 


(flffi/g l lMDir) Another limitation on NSA *s ability to determine the dfffeaiivroiBsss o f 
the BR FISA program | 


(BHD 

(blpfiP-lL. 86-36 
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(b)(1) 

PH3)-P.L. 866-336 


(U)TalUle 25. Selection Terms in Approved Status as of 31 December 2013 
by Target Office of Primary Ihtbresit 






| |NSA implemented the “BR 

FISA Bulk Metadata Moninty 1 hdutenahlRBisap®lfor SID.” The report inclmta: 



• (U//f®MJOj Number of approved! RAS selection terms, 

• (U//FOUO) Number of<pcrie$, 

• (U//FOUO) BMD volume, and 

• (U/IFOUO) Number of personnel by organjzattiiiBin and work role with program 
access, aq^pweddto dissemiwate UL&fPinffarraaiiitinnand approved as HMCs. 

(UJ) C6ofTtbibu*iorf6orfr«H FJ5A /¥V^botjrt^fchSb/5fW|jf><rt* XN&nbiUggBace 
Mnasnom 

(U) 2013 highliglhiBs 

nffl/TSIMMR) NSA does not assert that informatum from the BR FISA po§gimndfcBS§, 
by itself, identify oarttiiwffttpjdtsts.Instead! information aibtamddthroai^ the program 
plays a comptamstt&nfy rotievtathlrinadd^geibody of intelligence and CT 
investi®Ettikms. It is important to note that BR metawlbtta may sometimes Ifrethktess^ie 
source of intelligence. However, typikailfy, aajqafdtikitionand analysis of BR metaattuta 
are designed! to fill gaps in inforertfen gslH(i«cddim(MeiD<ttobeicotiBction authorities.. 

By helping olhssetttoaeeggfjp?NSA personndl ropaurttltitiBR data contribute to 
compirdhonmve cffifioaasto identify amdadittessstittetsteo the horndtonii. Tlte frilbaviiug 
are highlig&llSB from the EBRFISA program in 2013. 

• (TSIVSMNW I I 
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(U)Qn 2J June 2013, in respomsE to a request from ttac House JRanmaiuntt Seiko: t 
Comnrittte; om InEHlgunuEe crffeeiuanattttiriEiaidi^tfDhaillbiididdbarfoSsfS^tpjisteiilcd to 
that CHammittee ctntll thscSSuuRleSSliicctCGaiiiiiiiittHe C'oiiiidttilHisauuEethBifclcHise iindn d 
Senate CGanmititeees on the Jodiidinijy, aiititHKlB6foH®ffiitooornittmecs of the House 
and Senate GSoimittaeesi difet of 54 events in which ttte BR FISA or 

FAA §702 authorities or ltajtth coMtibbtadd to the ptdhnrinm of SIGENTT and to the IC"s 
understanding of terrorism] adtireiittiass. 

(Ui)4rin^y&t;yseftJb£4(Uihbotih:y 

(U/i TOUQ # NSA senior munragoment!ttfetiasreethafitthbe BR FISA gomjpaom ikiinjpxMatit 
to intelligemce ttrfaatl miittii i itatf^ifig tpteotilak 1 tefficoikt ttineatts to the 

U.S, homeland, priman% in support of the IF®I, by enhancing teiiraEtijlltyy to detect, 
priorities, and track temraaiikt atpenattikes amli their saqpp^ 

States and abroad. By qunrajiing BR metadata, inffl&dligsnuBC aand^SSsamsaatiidoto: 

• (U/ /FQBIO) Detect dtanusitk aaidd Unwaagm sdeatiomi toimfsimconmactwitihh 
domestic and ftbmigrn galtaioni turrmsaasoocited d with if cfes gig tt itmrat i s t 
orgamMtSimts, 

p)f.3)-P.L. 86-36 

- Ii 
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• (UJ. pQUQ j Mkra\wrssyeatironetBrawiPhitiih'kJ>i(Cbc dtedbanetynd domestic 
selection ttennssaassoiiaatddwith foreign tefforisa organizafflbnr& aatcein contact, 
and 

* (U/ fFOUO) IEtBt^tpc^iBitetdmTOEtstoiakatid^mmuo^HtiKanbcheO^een 
commiinnihamte ihssddethe United S Bates. 


(U) (dentdifl^ingi tfrnnsalte 

(U/I POUQ) NS A has many sources ofiinformation that provide indlkatdiniK of 
potential ttjeraraStactitiit^^gagaahsihctlihilthdtSlfetStaaod its interests atotxadd. The best 
analysis typicality offlcuurswhen analysts oavsktaatei irtlfoiiraationobbairiodcFrom all those 
sources to disseminate to the FBI and the IC as complete aaipiettueeas possible of 
potential ttmrxDrafcttlthjaetats Although fflRimetddtttais not the sole source of informattikin 
available to NSA CT persomndl, it is a component of the infonnattram that analysts rely 
on to execute threat identification and characteoizatiinn.. BR metadata can add to the 
IC's and law enforcement oo®irammttityisiunlte£Stodiihggand evaluattwui adfttateat 
infonnmattiian and the need to take investigsttiw® aaxttMsn. 

(U)Atflilty 

(U) BMD. NSA personnel asssaTJt.oamaifolestbaeA^geuy>to quickly analtyee 
comimmimkattiionvS and contact: chains. Unless the data is aggregated, it may not be 
feasible to detect communicatfem oiiaaaiiasthat cross commmnisattiim naetsoetksand 
authorities. The ability to query aamunuliiteddnuteiMatfrom multiple aauhaxDttitiss 
signiffioiidty imrccaasesNSA’s ability to rapidly detect persons who are affiliated with 
foreign tteroDiistooggaraaationsand might otherwise go undetected. 


(U) Hops 


(U// FOUO) When NSA performs a conttactt-ediaaMjgg] iqmrywQ teteciiatisatsaesxbsiaied 
selection term, analysts aaroeaittteto detect not only the direct comtectbs raaddeby that 
first tier of contacts but also the addittkmail titessof conta cts, out to the maximum 
rmrnfear oifiptanmitteU libopsfrom the seed seteefem term, f 




provide* aaiTOMecentpidteeppiatrffmf those who associate wrihhttercorafitso mrare 
engaged in teffiuifitt activities. The ability to look at a network Ijteyxaddtlthfirst hop 
enables analysts to potentiality iitortttyy tltheore of a netwodk, focusing and 
priori tizin&g; ressaiuceesc'ffii'ieitttytygatyandtrihrc.ats. 


(U) Histswibcdl data 

fFSMl/MTITj AhndtteBdadmaBgagdiat SID lea derAjp ascribe* to the BR FISA _ 

program is that the BR metada ta is Mamin ball . j | 1 

"jhistseirical conneetit?n$_are critical to aiiiidtaiaipdmg 
newly tdenuhed targets, aitelrrae&idtaarnay contain hnks that are unique, point ihty to 
potential ttagetsof interest that may bttiewwisc tee mirisefc cd. 
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(U) Tradkantaftt 


(U/IEOOOJ Analysts repartt tHMtBRRiTQtftieteiKira^^ifineidiefed^diteiiiiiiMlgtiaj^idgngf 

the communications tattecaait oftfiamgriat ODiKrcatMeas who may _ 

conduct att&rilss aaainst the United Spates. 1 


(bK 3 H».iL. 88 BB 3®6 


(U) Conqite ffl i B ittaqy 


(U/ kpOUO) ? The BR FISA program, SID leadership assents,, complememits iirffaimatinn 
that NSA (CillteUK; by other means, iimoeasmg the value to the Apsnsgy aaddliittiigg 
possible ttararriKt-ndhttedl t<pjWa<ncec©oummirantimi iiJaetwac n icjaxmanaamiiia:iurtwtbdsasbd 
solely iiisilte ttUae United States. As a complementary ttSDSDll to other intelligence 
authorities, the NSA's atstsss to BR metadata increases the Hkelihood of detecting 
terrorist cell contacts mitflim tltee United States. He BR FISA program provides MSA 
the information wemaffiary to perform oil dosHiig tHMtcani'eualabdeaaahlytststo obtain a 
much Ihrradthri' irndtetstturdlngg of the ttaipat anrdl, aasaarreHddt,aliho\\NS& A to provide to 
the FBI and the IC a more complete pettiame of possible temsniistt-relaltedl activity iiiraiife 
the United States.. 


(U) PrioriHidh^ 


(bK3H*iL.a®3»6 


(U/ /FOUQ) ! The BR FISA ipngmam aasig&swiySt Applying limitedl a nlflty ti c and 
linguistic resources awaiillaMe to the CT mission | | faawe the highest 

probability of connection to terrorist t&iEgSte. Analysis of BR metadata asraltadlp 
analysts prioritize eexmmuoiiottimrK of non-USPs that iit Mpriiires undta athear 
authorities lbeouaEsaoliipfiessawssaaieof heightened imfenestt if they are in a 
communication network wiflh ppeseoBsin the United States., 


(U/ /FOUO) SKD lleatfasilnitp asssH’tEstlhat.witllmLttthe ability to obtain and analyze BR 
metadata, NSA wnillll Idoeeaattoddfor detecting tamrnnuriitaltirm ohaamstlhatlilihlto 
selection Rothes ass^iatt^ suspected ttonrato oppeatfces,winch ^ 

86-S6 lea^d itofthc idciftfcation of previously nmfamawiri iprsmres of interest. TheBRFI 
program dfowg effi cient ^ 

i I j potential ftemstriistt autlvtitess. Any odibenttoettBst ithatn ipiglbe 

to conduct similat: gauttlyssBS wsnilfl nespiiine multiple, ttmiE-fflinmumrng sBtppsttiaatvwoidd 
frustrate rapidl analysis in ehMu^giigg situations amil couihdidfail to capture sumne 
information awtailhltilE iftiiixii^i’BRtiibtatk data.If BR metadata as noaat a^arocgotedda nd 
retained for a time, NSA could not detetttl 


(U) ERutmsrDIRNSA General Afc^idter tastitfkidclto the Senate Committee on the 
Judiciary in December 2013: 



(U) Measuring* tfhcwdliiEe ofttte BR FfSA authnit$y %’tttemnratebcr of plots exposed ttesdhte 
misses the pcnintt amdpreeerJMaisisvitfctliatfcftsbechboiee. The BR FISA authority is similar tks> 
an insmranac pdErs'.dteiaptekitmmaJdeessireetllihfithhtg^apjqjqsefilcdfteftft 9 11 doesn’t! 
happen again, with pailtatps ewer more eattoatngHiK: connsapionaess. As wMn an insurance 
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policy «m ywrrHunjs^.yyiau cttsnlt: ^dB^iiieeitk^'ffldecblj'yaskkiigg HrowimiDiyyitiTB.'ea'cyffli'Hev'e 
collected (HntttrepBdligytcto date-ygiau want to have att for the possible fire, or flood, (anlhdfi 
in the future. Combined with the Initt^iam on the program, rfcjpauntikil Ikrotrilih in 
allowing us to uncover the bidden terrorist in the U S. still provides a unique value 
consistent with the patesatian odi'^ipmctc jiighfais. 
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IIIL. (U)) FAA §7(02 


(U) Badfe^rairod 


(U) The FAA §702 oosrtificalbtms 


" ffi.'WHO Sectiotm 702 ofFAA Procedures Jfar Targeting Certain Persons (Omttsiide the 
United State® other tlkm United State® ffbmams,, states that the Attorney (Stewcakland 
the DNI may jointly authorize, for the period of up to one year, the targeting of 
persons who are not USPs and who are reasomaiMy IMJieizddto be located asilitsMetlllae 
United SStotesto acquire flrira^iiiMtlMitgurecOTfiinitkMaTiQtioiT.hiflaBthoth^tifygranted on 
the basis of annual arnTtfliaritioBsmade by the Attttmi®y03ea®daind the DNI to the 

esc. | 

sought through thirs aaqqiHkition: 


WHil 

{H5WHMWL. 86-366 
(b)P>-$® USC ZQIAffl 


(fi/WUr) The NSA targeting and miniimiizattimn ppooedalurgseeKtbbljhlthe processes that 
the Agemcy must follow and the requirements that it must satisfy to comply writhtHte 
limits the stattuOie and the ConsWuutthm iinpposeon the use ofrfttis aurwoMance. The 
targetm g ppooedduxesmust be “reascMiatblfy djtesigwda"to limit amqpBiMMmunaklethe 
1 p AA §702 certificattiknB to non-USPs reasonably IhaHweddto be located coittsilate 
the United SS&afcesto acquire foreign i ndtH^gBoed niuftnitatitttroand to prevent 
intentijMindl aaqqiiikitionof comnimkattonrs in which the sender and all intended 
recipient!* aaceknown at the time of acquishmnn to be in the United SSaatss 45 The 
purpose oftihe minimization poajsxthressisio establish oowtcMsoGivertbheaaqquikition, 
retentkrra, and dissemiiraattimn of non-publicly avmiibMellSSPiiirtffiojiratitiDn. 


(U//FOUO? In additicim to targeting and minimiizaairan ppoocddurgspAA §702 requires 
the Attorney (Smeary in consutatenn with the DNI, to adopt guidldHimes to ensure 
compliiaaniie with the limittatti&ms iintUaeAct on acqiransiiimn of comramramiiati imss. These 
are dccunnrantefl in Guidelines four the AcqsmSttmm of Foreign Intelligence Information 
Pursuant to the Foreign litmIBgtmce StmwMHwwe Amt of1978. Approved by the 
Attorney (Ssmearklim2008, the guidelines rciirfdkgcetlihtatgi^Btgigi'fgoiethjrasstadslMilish 


45 (PUIWQIJO) Accpiisitlcmiiss the coltectiban by NSA or the FBI through electiomia: means of non-piiftlla.' 
communKatirans to wtiiioHn they are not intgnmfedi pantiaa. 
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requiranaantes for application offthe tamgQliing pproeddmesand establish requirements 
for obtainiimg oromto® riders. 

(U/fFOUO) The goveomnEntfs FAA §702 certifiottiisiiBS, t toggtitriagppscriid'UEeand 
minimHariam ppoocddnrt^ bihutiotctthth A ftotocyekicGoai iOu tfki idefcijn require FISC 
approval. The FAA §702 certifcuthniK aateeaacoaippahidcby affidavit from the heads 
of elements of the IC, such as the DIRNSA, that desorilte the Agency's basis for 
assessing that acquisition will be consistent with statutewy aadtiboiaautiDnand limits.. 

(U) MeWnapJfadfagyy and Scops 


(U//FOUO) Owr n©OTijaw of the FAA §702 control fiamewrarik,, inaMtertts of non- 
compiMCE, and NSA’s rase ©flthscaaallirai% to support iissrmssjimi.vvmsltiaeddJiacg^y 
on FAA §§702 stakeholder interstims and reviews of policies* ipn®Edalujics 4 s,and other 
program ddMumetflation. The OIG’s Special Sitidk:: Assessment/ oflAtarnggnmeni 
Controls Over FAA §702, revised and reissued 29 March 2013, was also used as a 
resource. That study examined the controls designed to ensure compliance wiith 
FAA §702 and the targeting and mintsnmiHatiton ]^t)eeddiiresasas 8 »ai 0 ilied'ittoithilM)l 1 
certificattnaans. Given t feet tmaecoasastairintsfor the current review and the agreement 
with staff of the Senate Comrnniittte on the .lluiitiirtry.we did not verify through testing 
that all controls were qpeuariingas described by FAA §702 program sStsUaHodddes: 46 

(U/ AMLflO fl Our review focused cortltiheppcQcesisssattdidaitlnttolBuplpdacm 2013. Two 
documents ffl idclaaamianaliiy ywirihttesadclF A A §702 certificatisam dMlim@ateNf£SA4s 
procedures, for complying with the FISA Amendmemts Act 0 O 8 MIS: 

• (U/ /FMDOI Procedures: Used %' tihefNaiiowAiSimttiip,’A§gmicyjmr Targeting 
Nan-United States ffhtmmsRI/laaMabbJfidedmckd to be Lmmrnii Qlittsilkthke 
United States to Acquire Foreign Intelligence Umjfmmalim IPmrsimu to Section 
702 of the Foreign llntdlliigmtx Siumdiil/lmiKoe Atdtofl978, as Amended (FAA 
§702 Targeting H?EQtedduee^)and 

• (U) Minimttmdmm Procedures Usediby'tlkeMaiamdl Smnmty’Ajgmfy in 
Connection with Aapmifimm of Foreign HMtWggenedr ijkfnmmtdw / iPfftmmtt 1 1 to 
Section 702 of the F®mii$u Intelligence Surveillance Act of1978, m Amended 
(the FAA §702 MinjmizaiffiBin Procedures)). 

(U/1F OUQ I For calendar year 20)113, tlohqjptiiod under review* difffooat versions of 
these docmmsttte vseetcd lineffifet'tb shscuiasof changes msaideaatthe annual certifiottimn 
renewal and special airaarMtearetsto the procedures. 

• (U) Targeting FPraedd tires 

0 “Procedures tqpjixveddwith the 2012 renewal affitbe authmiitty. 
effective 24 Septetmiiksr 2ZG £2tHno<aghhl© September 20)113. 


46 (U/rFQ)lU®S 7 The NS A OIGhas condtoiaiatlseveraJ audits and special studies on the eftedCMomsssof certain 
FAA §702 program controls. 
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0 (Sli'NF) Tlhesffi|^m-cddii(resv\woran([ro<thilti^ii^left)ifiDljctt2t) K) kintilirtittcalion 
renewal anfreemirioddefififcQtoc 10 Sept(anntor20O B3 tHiraiigbl23 8\Apgrtst 
2014. 


mi,.,: ..... 

(b)pS)-P.L. 66-36 

«#8)f3)-P.L. 86-536 

(bK3h«l use 3024(1)) 



(U) Minimization ffioBEeddmces 


0 1 Prs^afees ajsp®NJ8i f%trhc2?)Q 22 

renewal, apprawril by ttkeHTBK234AAgg$tst 201 2, were dffikttiwce224 _ 

sggiffbgEii 12 teflfe ii§MteM Li 1 


O (U/ /FQy® ) ) An amended varaism oftlte 2013 minimization praoaduicss 
approved 13 November 2MM.XaaMl±dd syiaaiiiAl ipimdiiiitcssfi&ijraasassmi.ffl.^ 
NSA’^sbffity l"<§ m NSA-s | ~~fc o8t- 


taskmg checks vwatennctfrfhntidoing gppipprtyl jaaflh^ipcadarfGS'efofohiiailMgig 
data ©dlbatfedi dining atparaodi iin2M5 mlban thesecdtakswwor<n <mo t 
perffismsnmg ®Bint6oidkti. 


(U) Wired Iso ©5<^hediii»rp]rimOT£flitigg:>pimto 
General! ss ttagstthg guibhilmes. 


(U) FAA §702 Proyam Contort I Framgwarfrk 


(U/ rFOUQ)) Tie FAA §702 control liinanrowotk dissorttes lhtWv'r^SSvActigs 2 tets;(jdbddects, 
retains, accesses, cqucdtres, tdiseeminmcs.aaddpprigges FAA §702 data and tube oversight 
medkariksms to comply with ffi4k&§§DQ2 aarttflioatiaHS,inntildtiiggFFSBGtptpiwverfcd 
targeting and minimizatioini procedurees. This ssaxatirm mmimaiizesttteq3ps®i.snsiosns of 
the tagsatiirg aumli minirniiaciaxun ppoocddresaiaiidltdietnantlg) lfiiplrpteistedtdd)rfba*ctech 
phase of the FAA §750E pproahuntinn cycle. 

(U;)7Tzggetgng 

(U) Provisions of FAA §702 certifications 

- (8//IIW)) The IEAA§^M2 ttapgci&iag fpoccddnrg sssc f(foil lit Hi h arraoaawB; 5 ititaN SAi As osc s to 
determmev^iecihca^pJxpiwi^ivttatgtgdsisli^iglbldbfotcfl^iEtotiitignidiadcInidnatliioliiayrity. 
Eacfh ipre^paettive ttapget minSttimeetlttaeerctriter.ia. The indiviidindl mtiistt be a nom-USP, 
reasonably befaedl to be tenttnti oint9ttetlil(idJUitflddS&ttn£s,\\dibop|!io;sses®es or is likely 


! (U) A target is a person or entity against which intelligence openuiinnisare condiadtdt. Foreign intdiigBineeiss 
obtained by tasking Ute target's selesatoBs(e.g^ e-mail addresses))to acquire infomuitMipursimmtto one ofMSA"s 
authorities. 
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<b)tr Y 

(b)(1) 

(b)(b)ff!IL. 86-36 


to commmkatte f&ra^uniiiy@fiiffioii<is&rati^ Gflne |®thc[ 

FAA §702 certificMdrare;, 48 

(#^W ) F) The target mg ipmAiges sEatb toat. whhen NSA ptrtqpcsEtss ttoditecctssm^dillclancc 
at a p®s|p03sttm:ttagactjit docs sSGhly after iitt ttmslfaaanaddssanadlihiggatibouthdic 
ppSipective..target tDt"dte facilities the ihliiMiiduiSlutisetotocimmttttMtitgite. For tCKanplie, 
NSA penaBanmel may examiirr 1ea iih1ftrrnaai(i)(iai,otobatnBddfifomma non-IftESA elememtt, 
such astlhxsfftoTn tflfae CIA cer FBt, I I 


(bK3)4o tJSC mu ij i 5 S ' #lF . ) -NSA ^RSMbBtl iMMt&Biltsoaas&assvttdtadimhdl|fl-(^ftapba{jYtfrgar^spamsses or 
is likrilw to commaut iigate fftreijgrn iiitfetUggooeeidMotmaadi®it (Mxrareiniiigi fofehjig!|i>qraaver 
j st'dd whether the psgjsisBttt tta^ott iK^gp-opri^cuttildcioiMK of the 


JFAA §702 eerttfi catkins. 


W(3)-P*.L fefe-fe 


(b)(3)-P.L. 86-36 

(U) Targeting process eMwraitemv 

(U/ /FOHHO) TImiMiiitaatetaaggtirigguuddeFAAA7§)202i]ah(t)ioilfi,t)lSfStfS^eijsraBiHinaium ust 
researdVi tHicpoeppcciia'ctcteifigct to detemiiinc ’wxHrcjtHiDTri ti nincsst EhthtKqo3d|rteii!rc3irEtsiit s of this 
authority m4 to idernttiilt^' setatsnss tfettwilll jybdlftcotBnnuaira^ 
prospffliiiMe: tmgeet. 50 Missihn airailfesitsapiatB avitiiitilni mian assigned misxkMi ttoMt ti&ee 
the 'f cce^s a^d ff^ting mm) atf fellSW taflMg jtygjg) 

Ahilysas and KJroteJiion on ttfec basis if the §702 Targeting Pfoe&totgs m 

SSSPjg l g te O'yjiS the teis fM ; a :: t*r BCtijjj^rcquest 

___| is the vehicle for development and submission of TRs,]_ 

| The TR doouranttoitte iirftsrmaiataxiwi saiDppodiiggthbetti^bligigldaeiQroiiiiidiid 
L|is-nub|-ecUt(tr least flw® le\<dte ofitwrow before tra^tth^. Addittiowil rwfews may be 
pafarmati by the SID Data AcquisittikMi ((S3))afffiec of Targettiin^ $tta&&g$y antil Mmimi 
Integnffliffim (TSMff)) and SW. 



(U/ /fOU0) Mission iaM|yst£i£ff eertfspMtelbl foibrirdimiriM aieReacahciiidniiladQtiitiiiiifflari on 
of potentMD taitgats writim ttimrooggankaadniin assa^aigdiodi skisskms. Analysts miMt 
completes aa traitiling regiimnian iitmsMtvg: ‘gonardl (osursses on legal aitliamiiiiks aBridannuattla I 
courses on FAA §702 pncuuBdiiiteestto IkeailgHkladaiiyM^ 
and access and handle FAA §702 data (see the ^tt£t£s3&.s a ft d dr iFi iamiimigi gs eiiiixbi t>>n}. 

(U) Provisions of FAA §702 certifications-ebyg}Uit\tyfchDtatiapi^bg g 

■fSttlMD) Foreignness determination Thettatgaiirgi jproj^iaesaaipapiiiiithihtiNMbA 
persuMtttdl tesamihte, as approgaiiktc untfemllib a; iatnstnffltat£utsp ah theoeitsgiEjges; i e s of 
infoimafeim t® (iktBrmiroe whhdtihe tilth eitatckdledatgeg is asiKiUHUSEI fidsl sicmtiJotlmi b! y 
beliewadl to fee outside the United States ((tHKTifipfiggnassssddcterminaifiKHii)). The 


48 (U) FAA does not define life term “reasondbfc IMkjfc'f'bhuthe Act reqwiitiss that NSA adopt targeting pproeshkcKSo to 
ensure that FAA §702 acquisiliiiDin is limited to targets lEraamdiHy bbbti'asdidlo be outside the Unites! States. 

49 (U) FarifliMiess are conranuriicatnim vehicles used by targets, irorWingtelephone numbeas tunile-niaill addresses. 

NSA tasks these fecilfittBs 0 n'''^te®<ra''s ,, to obtain fonrign inteliiigBnjie from approve! targets. 

50 (U) Selectors are unique iiiBiltifisssof targete (Csriiiitiesigigaiti^t'hich intdligsime apsiafomsare conducted)), such 
as telqptanE wnilms;aittle-mail addresses, used for tasking (iiniiialtnggSJGINT collectiism firorthe target's selectnns)). 
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determination is based cantitetiMiaiiilWyof information awaillaMle rtttmitthe prospective 
target’s location and status m at UBSP and may be obtained from any atraeairai 
combination ©ft®Kse srauiKEsaK: 


* 

WBMPMMr ^636 

t 

-1 :::::-r============-,l 

Ithaital 

..i 

(U / FOUQ Br Foreign intfedllgparoBS pur posse ffnrtteggtifagg In addlitiffitm to the 
foreignness itetammirattinn, NfS^ipj$saiiiii®tlnmBS&aseesswhthtofe^ 
possesses, is expected to receive, and/or is likely to communicate femrigpi intelligence 
pursuant to one oftHrc FAA §702 certifications. 51 Each certification iidejmttffiies 
categories acffforeign intelligence (see BadbOTUimdl rntthe beginning tfFAA §702 
section) and specifies atEtiiwiiiss for which foreign intelligence cffiHectikani is approved. 

(fi.'.'Nff) Targeting nrnieit also comply wiHb ttite Aitetnuey ©tela® ail te Guidelines for the 
Acquisition of Foreign Intelligence Injhrmation Pursuant to the Frneign Jlntte/l/li^mm 
Surveillance Act ofl 978, which udrtsiates the five targeting activities ipioMtiitstl fcfyy 
FAA §702: 

• (U) Intentionally asaii^flfia^g aappese^Unmwnat the flame of acquisition to be in 
the United StetGsi; 

• (U) ISeACBBsetaEggtitiggjtlidtais, targeting a non-USP araittside the United States 
for the purpose of targeting a particular, ftanpsun person lKEaeairalilly bfoiiktwddto 
be in the United Stmtes; 

• nfSf/NF) Intentionally flangoltiigg aaLISSPimasuialDly believed to be outside the 
United States; 

• (U) Intentionally aopmmg cwmmamMxaMwnss aaio which tite sturdier amil rill 
intended mariycitmtls; aaeekkraownaatt tte t iirraeof acquisition to be in the United 
States; and 

• (U) Targeting iinraireiktant vwihithe;HrnuTlii Ariraaidliraaitt to the Constitution of 
the United Sams. 


ro/HiKrc\ I 
j »»r * / f 


'■ ■ ■ 


31 


9 • • • 






'I I 


51 (U) Foreign intdfaBrocein foimuaion is defined in FISA as (1) information that relates to, and if ramarniiargiaUSP 
is necessaitw to, the ability oftfte United States to protect against- (A) actual or potential attack or other grave hostile 
acts of a foreign power or an agent of a foreign power, (B) sabotage internatifflmd terrorism, or the interaitttiBiKl 
proliferation (rifweapiHtBS of mass destnidtan by a foreign power or an agent of a foreign power, or(C) clandestine 
intelligence activities by an intefflpjiicesen.-'iicic or network of a foreign power or by an agent of a foreign power, or 
(2) infonmriiTm with respect to a foreign power or foreign tenrolteny that relates to, and if concenriirga U.S. person, is 
necessary to- (A) the natiomll defense or the security oftttee United States or; (B) the conduct of the foreign affairs 
of the United States. 
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(U) Targeting control p®ce«itaiit«s 



Target irffigaSEatctin-fefpsiggnesss 


(U/ irQUQ) Target researeh-fdKatiign Infsi^mw tsteifcitmlirate^ NSA missies® 
analysts task tfiaggetsthat are aligned vwihtHaeWaiOoakllrilnlfeyigcncgi'Bridmi 
FranJoesvo®fek,can be linked to one of the foreign inteiiipwtE ppipposesspBpafififedhithe 
appropiiifttdFA A &:702 certificattman and generaUlk- are within the analysts’ asa hmsti 
missfem aaeaalNl I 


(b)(3)-P-L. 3&-36S 


(U/ ffOUO ) Targeting request Once missikam aamij isMscomplete the research for the 
pa^poscgl (target, .ffimiisLd[ew.hipitind submit aaTR^ 

fet an gtfjgl&fe tfepft- Th§ TR th-tutna iysr§- that 


the pmspoaiii\(£ ttegeismeet the stantiMte in the targeting [_pD®cd<LUire.s .OQincti itM HR 
has been reviewed and appiwted (taeeTlaiggdfliggAAktbwiaatiK)n j 1 1 ahe 1 setectixtenatefi tifi ed 
in the TR is used to initiate collection. To complete aavaMddTR, mission anjdiysls 
must compile speculate irfaumuttimito demonstrate that, based on doe ttxMlnltityof the 
circuranstlaiiiaas dstetermioddfrfoautih die a?ea^irqir p©rfocrhed\c thesen isaaaffinabtailbite i (belief 
that the proposed targettis foreign (not a USP and not within the Unjted SSt&te$)and is 
likely to produce foreign intelignnse ceamtaMentwith one of the FAA §702 
certificadknK. The TR must include; 


52 (JLJ F OUC M Raw data is data that has not been evaluated for foreign intdlipmjeeor procm-ust!to hamfcUSP 
identities pursmant to the minimization prooailums. Metadata is dialing routing addressing or signaling 
infoiroiifo)iijr£.w®Eitttdd\witlj aonmnariicatroinbut does not includeinfommatronconcramingthe substanueofthe 
conmmimiuatom. 

53 (U) TheNationMIn(tidnigaiicePra 0 niiti®Framewniktrandates natiswill foreign intelligence objeouvasand 
priouiitiBsapprwttdlby the Presodant into specific prioritization guidance for the IC. It serves as guidance for U.S. 
foreign intdHigsnaseanalysis and collecitkin. 
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(u//p mm 


^3 


: Wif 


?vr^ 


(U) Sources ssi^fportihig ttitexldtaomirijniation of fordgmmess. 54 


(U/ /FOPD1 Missibnn analysts musEte croat ip(penmmntt!iti(rbMti«n£atlis<iioii oftiliae 
inforarcaten swnoassuisedd to establish ftraeagtnrass. Copies ofttte source inffamaaidari 
are sawsdi in a nesanrareekl aasesssSfihiBfiihriintstfEte SV maiirattairs.. This nsqp»3ttOT>y 
facilitate appwail of the TR, asmsfll asiranttemndl anil (Sxteena&beeKsngjtob t. 


UI/TWJO) The te—)| system supports targeting compllitaruB; astftse mniisfami amalfe® 
creates ttteTFR. The ^tonuTqquires: 

(bM3)HP-JL.a8BS3B6 

• (Slfl S lt/REL TOIISA^HVKY) DettiJkiit iraifonniKatHrn QSStdUliiiing! tttee 


Wff 

W»r%b u§§ mm 


fordamasas of the selector-J 

L.----—-- 


» (tf//F@0©|r Tiffetf iiettlittiiiggthbcTMR, 


• CompMcan oflfcgy fields to documemtt irafimnfBtiban aftbmtttUae 

prospaames ttatgsat (feg*. jaatlthci oastdaKgigtitgig>pppsaschdraw the indkiidiiiatl mass 
deteramimadl to be wtsife ttfeHIhittetl States, teflk.ftimeeppecttadoitltiaattaBggdrigg 
the iradireniudl will ip-adKeddbaiiigiiiriradlhejiM^) aratid 


• (U) Itiarriffutatam of the apptspiatte H32^§pB2 certflffitc&inm. 


W/ tfOV^ O -Th( j> I sygtefifltakfl: 

{b)P)-P.L- 86-3S (b|{(1) 

• (U) Ideratifcs oannlflliktitiig (itrtto \wthiimn i the TR. (fl>){$)-R^8^6 

• (U) Captures refaenamas to supporting dbaaimuntaticm, 

• 6S//rel to usa, rmH j ft I 


* fftmiLTQtlfiA PWfti i f I 


54 (U) TarsjBtirgi Rationale is a btmdfjiujitIt'ccadonfor taigaditga selector, intended to explain the conne&fiimbetween 
the pffipnswll tinegeland a foreign intelligence purpose*. 




tffii L 

[ Iti 

HA HI 

HI —... 
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(b)(1)) 

(b)P}ff?LL86©S6 



PK3)-P.L. 8fr3£ 
WM50 USG 3024l(()) 



(TSW/REl TWSA, rVE^ I, 


{b)jtt)) 

(W(3)-P.L. 8®-36 
(b)p)-S0nUSG;3®22Hi|) 
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im 

W)-P.^-®6-36 
148(3)30 USC 3024(1) 




m;§wREi to uia, rWvfl 


(U) fftrawisiomas of FAA §M2 certiffb^tcmsaHttidliratkalion to target 

(U/ fFOUQ)) Approval I to task a prospective taangsfe ssitettoES-ar^qirBsealttettlthe TR 
entry ffiwttiiattaakkiggtfecreffiawdd to verify that ifa (omttansstltbcnacessaayy cctiaaki»0HS to 
source mtfoTniat®ann tha&fldddltfeaimigtyst to reasonably bdlikua; thac tHKinddrvddiuti 1 iiaa 
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non-USP outside ttfine Ultantesd States and is linked to the appropriate FAA §702 
certification. 

(U) Targeting authoriizatiiiitiiHe-c ontralls 

(U/ /FOUO) MSAHra&. limmpUoniitcmrtieaii aumiUti-llmdlreuitiewpptxjcsssto approve all 
proposed targeting. 

(U/ fFOUQ j Releaser n©xifflw Submitted TIBSss arc felt reaviowdclby the mission 
releaser. Normally, titer el easer is in the same organization as the mission annoll^stt. 
Releasers must complete tie same tmannrag courses as mission anma%®&. They 
examine the TRs far completeness and aompllteiiDee width WaeFF&A§702 Targeting 
Review Guidance dewellqpedl and maintained by the Misainn and Compliance stuffff, 
part oftfte Directorate far Mnatyyra saanddlProiotadaiOT, withhi nNSLS h Signals 
Intelligence Directorate. 58 

(U/W AdjuwKasdton | | the 

final approval of the TR, known as adjudication, is ai critical control point iintterikhgg 
selectors under FAA §702 atuihnttty and is performed by personnel designa ted as 
misaron adjiidicMctm .TKRs were iiriftgUlyv sub ject to adjuditatttoi by 
8§t*3# |1 7 the responsibility wm mewed to the 

mission groups wiiMBn the SIGENTT Analysis and Production organization, where 
specially ttHiimtl amil experienced anoaillptBH, uusiailjyfi’w™ the same organization as the 
targeting anuilySt- ]3peftf<nmmadycdydad-taaDriuif 9 Adjudicators amrstt conaplleite the same 
courses as other mission personnel as a prerequisite far atones* to FAA §702 dtettra ((see 
the Access and Training sasoikm)). They must also complete aspsriffir osxmise on 
adjudication and receive on-the-job training in their mission office before they are 
permitted to adjudicate tinteprsnttBitlly. Adjudicators rcusaiwe adsioe and updated 
information ffiram the staff of the SIGINT Aiwlysis and Production organization, SV„ 
and OGC on developments affecting tttea^qilimitomof the FAA §702 Maternity. The 
majority of adjudicators taxctwo or more years experience iiini adpidimtiKiii. 
Adjudicator performance is monitored by the Mission and Compliance stiaiff in SID’s 
Directorate farAto^yasaiadd^Riddiacttion. 

(CNREL TO USA, F¥ETj) Ati^jiidliDatiitKDSS rare id VtwTRJ siteraacatiEayy .eaviitaite t Itb e 
evidence in the TR supporting the foreignness of the proposed ttwgfit, examinne the 
TAR statement for ttoe individual’s ffiaidigm intelligence walluE.and verify rthattfflne lH 
supports dlvgttillt^y ffamteggfcibiingundcbethe specified FAA §702 certification. As part 
of their TR reviews, a^piiotttiis recroatCe tlte sttqps t&fem by the mission andlystt to 
independently (cauitGinmi fctt tttestifppwJlthsgddMas accurate and that the most current 
information ®xdiMdleis used to support aircasauniklle Hiriloffttiat the prospective ttaugett 


58 (UU//TOU0} As part of the Opera tions Staff for itoe S2. the staff li iffdUrilasteamis who provide MinromaaniiloOTa K] bti t 
of SID’i uie ©flfAA §702, ai9«ii as[U> amH| J: 
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!U> 

(b){3)-PJL.SBS3BS 


is foreign. Following tHaesaaomepucocddureas mission aiMVs&ts aijliaaiicatoEsI 1 

Itefc t EFfflflS 

whether thtrecdissupppctirriggrr contrary i rrt'txDnraatrtjonra^galioligi cIt dlte ifaiEeigameaf the 
individual. AdjudfcatDK must complete aasseiaesof checks immiakljyor assisted by 
technoflgngy: 


^H3)f _j fer ah Ms? tepwe§§ 

• (TShSII/flEL TO UGA, TVCY)) ReviewiimMriltbd daMs®s©f selectors 

,_1_ 

iftof f RRWf M 

(^^.lL. 8^3S6 individual wa§ not f&rgip. 


• (U/rff OU tffi Accessing ttiieSV4 ShareFoiaitt SSiteto determine w^teMeeiltteecei is 
infoninisaBiijan thaat\waiddpipiaialicjdie curremtt ttasftding reqquastfrom being_ 





E 




(UU VrQllOD) If adjudkattsm araeaHMeto Cfldfinfirm tllflltethe pospspecby^-pi'get meets the 

F A A §702 requireTOOflfe for tas king,, they approve the target's selector fbi taskikg p~~i 

| However,, if there is an error or respiiKB±l iMdkmiBtition 
is absent in the TR, adjaidiiotGres must ensure that corrective aadtdxnni istlkbnnbdfefare 
approving tifaeTR. 


(TSHSI/?flIJ)In most imStaraiES$,if adjudkattenss ifitentffyup{idtitdcli'’QtfOTgigriBess 
inforraaaUiijan, they substitute that infonmattimn in the TR to ensure that the TR is 
current. If adjudiratteras find an error, ssnthhas inaccurate flwraggnnessi nifotaialaition 
insufficient mviMeceeto suppomt f&rcii$maess,or an incomplete TAR statemnsitt, 
adjudiraafenss may deny the TR and return iitto mission ami^ystsfor correcti®m. When 
the TR is corrected, tthe TR goes back to the imisiixmroii®ss®rand the mission 
adjudicator. As part ofth^a^posml process adfpHkmtaEs upload! documented mri of 
the soimcesB supportina tte ttuEaaliina (Mecaaioito the SharePoiinitt ssitethMtSV maintem ms.. 
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(b)PHP.lL586386 - 

(U//FOUOT The tara^Htiirjg rceTaewppjrocssss summarized! in Figure 8 . 

_ (U) ffipiire ffi. FAA §702 Targetings ReviewFffeoeess 


FAA 702 T argeting RellieW 


i] 


i'iliisir f ~WlW~:dllc 

- l'OIK18JttfW’ ld!Utk¥0i) 

*.ec*d fDria , p.d!i CMft 


~fl«thtfl.lrYt hHe I WtiiM: fl 

,tRX<WW,IorGU:VXllatkr. IV UtoqiatU’* 
Sbflw<iltttM! J'leMdtC'J, 


(U) fftovisiotn® of FAA §712 certiffiesrttomsawipfet/al ofTRs firtgmrt otihetr 
agentdEESB 

(U/fFOUQ^ TUnffi FAA §702 mimmizattari ppoeedduresset forth ppcaeeseesNSA uses for 
the acquMdinn, refttatitioruiafteand disseimiiaattiiim of inforamanimin ac^iiicddumiM'eF It A A 
§702. 


(U/ilPOUO) hriacmflddanee\vwhl£ SetdiiiM) 16 ((s()c 0 f the mininraizattiism ppraeddree.s 
provides tttoeCIA and the FBI uramimikmeMl ccmmuiu uniatitimi sacipq udrlefi 11 pnna-twam 
FAA §702 for targets nomiratteil by the ixisqs^riveaggedcKand approved for task 
in accoiianranE wriihtiffiMfct 


theC!A > Mi5 : theTBrmustli^^4eLmnSriwife^doOTfflramta^cdi»ireceieeS^mNSA 

in accortomaE with their FISC-appram\cail iTnmiriiraatiriBi|ttfd|Pf6dureS MBpptedd by the 
Attorn^ General in eoniutaUfewi wiithrtlteODNI, ‘ . 

{bM3)HP-!L .886386 


.~~ 


f 
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(U// FOUG) Conttiodte over appm^l of CIA aimd Ffffil HRs 

(SWRCL TOIESM, FiflEY) The CIA anil ttfine JBBIssaitormtitre^HSstfotaadfeskgngetalBotors 
of prospecttirac ttaiigats to NSA, which ikwbsvks ttfteffu edsgtiiniBessi mtifocrratati 0 naaddthhc 
foreigmrem jiasttiifitatiixm ffertH«qp)eppctinffan^^taaddaffp®(yieeah^se4etot®rfe)for 
tasking upon ainriasfseMnratii tblafst tHteteiisia'a-amoaialblii^MitiDatlidipipf^EpeGtijvEiilSirget 
is aman-USP outside tHceUitgadd Skatesuad dthhiat:ohtoppiupiwift 1 braddiqg fofereig 11 
intelligence iinformatinn niirsmnrtt to one of the atmMW&d certifications. I I 

(b^HRiL. fte-ae.. 



(U// FQIMD)) T^fc22f)SHimmfliHecstltfeaaaggDriggppOTifiBjons ofttte FAA §ME taigettimg 
procedures andtthe contdralsN^SAlihasinplplom'Cntled to maintain) connfttantm;. 


(U) Talblte 26. Targeltnjj IPhcivisaiossaBcICGdnlksols 


pswawNft 


Provision 

Control 

(U) F^pnnrraaB -AcqulsiMm 
targets ©n% mxsEm-llUSIPs 
reasonably believed to be 
outside tltne OdiiitteddSStBEtes 

(UZ/rOlLfO) TteTOdtomrrrmte the suitppMtt for NSA's 
determination of the prospedfoe tteg^teffareipnniasss 

enforces ©»$ Ifiiellidls 

information), iioterfiirtiftes c 3 Q 30 T^fl€rttrrcn dlafia,, flags selectors ihnellGpjite for 

taskingf | 

(m 

(b)PHPU-586336 

1 I and asgqditunass seoraee 

information suifpnjrrdirfiii targeting. 

|JU//r0U0) All TRs ar©to at least tas> Iberndte of review pirtor 
to targeting. Additional ireworos nrB^bb^pEfrfcmBddb^\rSISIIt/kl>r SV. 
Reviewers ©s®mirne available information to validate amrapy of 
the tareiignness aMteimrinrefttoDr aindl tllli^caEiriifntdii^ information tas 
been resolved. 


(teJWt. 


63 (U) An MCT is an Intemmst “trunfiretion" that contains more than one disaetE COimmunimtiwniwithin it. If one of 
the conmmmiMtjmnswithin an MCT HKtfermtmsa tasked selector and one end of the transaatikin is foreign, the entire 
MCT tnaansnationwill be aapiKstlthlncaiKih upstream Intetmt collegium techmpirss. Since this can include discrete 
CMramurihadtonssthat do not contain the tasked selector use of such inforanatinn must meet spedffic reqtimtB merits. 
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(b))(3)>pj_. mm 

use 3 qmo) 


(jj/CljWf) NSA wll roaiintaij i 

•'records 1 


P o support 
compliant NewTRswiHl 

be compared with tftnese remrdte 
before teBpttnn®. 


(U) Slrt&lIgpmBe FRugmas 

ofnaafg^biTiB - NSA m\\\ assess 
whether tttetterc^tppsseeseesoDr 
is likely to communicate foreign 
intelligence pursuant to Game of 
the apprwed certifications. 


(U) NSA nma$/ proviide 
unminimized communications 
acquired fpuunsuieartt to FAA §7® 
to the CM and FBI . 


(U f/rOUQ) TTsffl&tmj} wp®stte 
must be suiippc^^ 
the informaiOT that fed to the 
analyst’s reasonable HteMf of the 
foreignness of the target. 
Approval of the JR waill inrorttutte 
review of the dtettbm. 


| TO/rtMrc£L TO USA, f-V Pf-rt 


T 


tTE//e(MffiL to Usa. pycv j 


fTO.TOWRCL TO UOA. rWZv ¥ 


(®//S1tfw n NSA mamtaiiipis ttrtggereecwtes in a databaseajf 
selector! 


L 


TThisl 

*ED 


This todi is used in target 


research by analysts and ihrtteiftoes with |— | to identify ineligible 
selectors proposed tor targeting. The itnifemn^m generated is 
reviewed by the adjudicators ^ntf^ryycoaflitiaslsboulkil tenanted 
beforew^raaiwwWJ. (b»)-PJ_ 86 


■36 


(U /frQU^) TTteTMF8&feraBhti(^^ is 

requested aaitoimticaitestiiibdibdd(adofi®igigninMfti|§Boeeppq]jp8ee 
spedfctottteFIW uodferwhiisrti targetiiirig is 

requested. This is subjeidttoattiijpiiGaatGm 


(MRELTTCSIilJMH, nt a^TfhiBsQ3A\aadd FFffll may rni(mmiiitiiiatotto®ite 
and sdtotois for aoaiuiiigiiiiini. subject to IflSffist^ogifcitiiaia 

procedures. I ti 


JJThe (DfA 

and hBI have tlielircmnn mmlmfMtxn procedures tor processing 

the iiiirninnTiiTiiiTnrii^®^ datottWtttte^yre©Esree. 


^ irOUO) The mrfjjiuJGliiisataErri mmmu includes examination of the 
citations tfteftoBsgprresESs dteLteifnirrsfltcrrn Rntoiirttanriasif in 

the S¥ StaefftoiiTitt site.. 


) 

(b)(3)-PJL. 86-36 


t rc a irawNFn 

(U) Provisions of FAA § 7 ffl 2 flS 9 tfifftoatooBsand other Gu/krftenraee-Ptost- 
Targetiing fftevrawv 


(S/WUr) In acoaiKftmuee \wtHubbaa^ettrig^ppJocrteKse^oft)lirth in each ffi^§^0Q2 
certification}, NSA amlljsSts arcreeppiiredd to conduct! postt-ttagstiiig. nswirowss of all 
selectors ttstaldimddcFAA A §702 authonitty.. The ttaigniipg poaaitiiress sstatolthaf'SiSilch 
analysis ikdteignedd to detect those aramsimss wheniafpptHQon who when taKgaedl, 
reasoiiraMy bdliewsdl to be Ikxcatatl o wittiwfc t bacilli itad d SStta e h tei si a uceoen tetefttUet 1 1 e 
United States, and will tarafflfc ttotakleo,®]®ps to prevaflt the iivtemiinndl arcqu sitiuni 

of any ©arnirumiattinnaas to which the scundtoraaid] aill ihtfcadidd raarp|ii<ioins aaec Ihnown att 
the time of acqui&tionn to be located in the Umiteti Stated. oar i tinted ntaotionala hiiugsaiag) g 
of a peraaanwHto iteiimife thKlitemtiecld SSta<&ss'.'” 
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(U) Fflsst-targpttme 

tS#f#TNSA has implemented four procedures to ensure tlftut ttorgatekl ppeaaDss 
continue to meet thiEG3Titafki5p®mfFcddimtHieFAA §702 targeting jp-osodluras. 


(SI. ' MEL TO USA, rVE 1 i f ) Postttec@*itigg controlls-e& taxation to review NSA has 

implemoMtaSl aaqircGBDsssc sMlM(DE)hi igktihotu Review (OtR) that has two provisions. 

The first requires ttiat, upon tasking aas^Js3ttor,ihhatriBsisinititBBnlhh&linitiiaialfedisll9i3lgng 
must iTOviawanlltettdxnnfrom that tasking wiffimSSitorisirassslays ofttei'etomplt ofttte: 
initial pitsKEof traffic from FAA §702 collection. An e-mail notification is sent to 
mission team members notifying therm of the receipt and the 5 day review 
requirement. The mission anai^sstmuasteKds'ivw saisqitaptief thfitancantenf dfthe 
cpjlcbtitionto determine that: 


• (li) The selector is being uKBbltaythe intended t&rgeM. 

• (U) The j^et Si,fell id under the requested FAA §702 certification, and 

• (SUUELTO F%ffiY) E ~ 

i’ F *=""- *- 


(U//FOU©)) Ifttte reviewing annallptt dstetemines that all three requirements ilmvebeen 
satisfied., tthusniakkinghe tasking wdlitlunilterFAA §702 authority,, no further actiinn 
is required. If any of the thi Ee reitu iirements iisnot satisfied, ttteesaibEitCammmtbe 
immediately detastedl in tfae l I system (teTOt'Vddfift'cmceHbenboh ).The selector 
cannot be resubmitted isxrita^Mijg until all requirements Hmvettoen satisfied, 

(Detaskimg issdimjBseddfiftthbein Monitoring Odlbsttiori seed don).) 

(0)(*3)-P. L. 86-M 

(U/IFOUC^ Hite searmil pproiasronof the OtR process requires the mission rrfffceeto 
conduct ainon^iOTiQgravkiuvof at least a sample of the nooutmtt foam ©iggiging ©defection 
to ensure tthatthe target (umttmiiEssto meet the criteria ffibir targeting limiter FAA §702. 
After the initial review has been completed, a sample of collection is reviewed) 
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(U//FOO©) Post-targeting controls-mraniitatriniggcotittettion Mission ;andiy£$s 
must nrnmittBTcotiHeQaD ifcfounihditistiDsn^ih athdiMsaeg et no longer nwett3hhtf(fojigigffisess 
requiranKQitts. its mat atssadutBiti vwifri the tffifetissblcmcu\ooii si sicroti ilktkbd to a v®lM 
foreign intelligence praps®: tiedd to an FAA §702 aarttifcoatami. If it is (teamihetfi 
that ttflDse tfeengpito® lthhesei?ietd>c nsi s no longer ajuptrtpTiate ffor tGadbitg wsiar tHiisaatitihoiit jty, 
NSA willlhlaia^ee to take caniimKtlthamit^iiinlodedfedeitelgtithebelsetecicuepaapmging a 
compliance iimditertt, rand ling iimdlligencc reports, and fungh^coMHctadd 

cn mnwmriiffiHi mn s 


(bl#p:lc 86-36 


Juser of a ta$Ms»tkwiisis an 


(U/$F@S#g>? If collection indfleasgl 
individtiMilr wta© is not thEcinttotakidd thaggCtaaddissnniibt of foreign inteHigcmae voUiffiajriss 
or. may be a IJJSP or is iinn tfcUiiTOidd SStotss. tHeammssio nc^ffieoiTmts iBiimaiifcdiKitcly 
remove fftrnn CO ihl^iiafii 'iffll selections f | and HdtoitliiHw 

collectiom inelngiilMte fornsttaitiam. Additional] reseaHHnm^y be perforamoi fefratee 
detasking,, if there is evidence that dteiiifformaiikin on the eser r $ lEISPstatutisro!' 
location is not correct. Unless thaeissaasaomgg-easaaain to doubt this inffeimrauritimi fltrami 
collectmt, it is jpmwn®dd wdltlJ ami detanking sIImmiM occuror iimn®diaiasb}y, If review of 
collectM* ideinffiiilSkxcoaramumaatinasiriiwfeiblrlthiie^ 
are Aatanniimtl to havelha3mt\viil]biiuthhUliiihtb£^tcataheh£imQie of collecttami 
(domestic comimniicatimi>3), thk»sea:cninimiinKttniramasftltel!tedcQ|tsri/®dtl!fc4ihiildaditcd 
exceptions, 64 


(IT) If analysis of the ©dUaniinn tihilis ttett the sdbatnTi i aioo 1 txn^etut*$ddbbyhhdative t. 
the seltaariraaBbbffgmiwmid'rfoimnct^ 65 

(U/ /FO8J0)) ) Aattffldmo^eiihnnt ptiivileged communications ancsal^jcct to speciall 
proceduunasB dasi^iBdl to prevent privilqgsrii intfoninmiiBn from forangsusstil iin 
proseoaition. Should review ofcollectikMi i4oitti% corannrmiriicattuiss bbeweeaiippcrsoHS 
knomm to be rasArarnnii^ in the fllhitfirtl .^aESciaidltlihbi ntattens^sy s, 

review' of the CHsnimvuhoaaiOTni mnust be discontimml anndl OGC mffliffBdl Ifai'sgiitllaKtee on 
handling the ©mmmuiji^tiimi 66 


64 (U/ F OUO t IBthe domestic coimmininatamcollleatatl is not related lo an incident (see Incidant Repauthrg) 
DIRNSA may appim® ;adlmtiwdOQiwaiver to allow reteatiiain af>ftfecoi4etitiwi. 

( G>>G I - RCL TO UOA. r\T ¥^ 

(SffSIHREL vVl 


65 


J 


w (U/ /FOUO) Mttaiiiorinig mmiwmmWilitioiis between a person known to be under crimiiwil indiotonmit in the iMited 
States and an attounty represailiiigg iliiil individual in the maitter under indicwnemmusl cease once the retaMtrsdijp 
has been ideifflilfiatl. The acqwiiffiUcoimffiutmiaitffik’s mustJbelbgged and NSD notified so that meawitEsnay betaken 
to protect such conmmmiraittmiBsfrom review or use incrinilniil proseMilitioss. 
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(b)(1) 

(b)(3H».JLSB3S3BS 
(b)(3F5ffl USC 3024(9 
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(U/ /FOMK0) If autheMHffiil aalilted^niiiiddtdBatyi^cqiuip3B'<asfarfrgiaiginii'iiDTiniirnai»icEtiofi 
or concermmg aaUSP (e.g., an FAA §702 target is cammumkatiing with a USP or 
about a USP), the communnottinn may in general only be retained if the USP 
infomjatiBan qapaMffiesasafcfargrgin ttri tel risen <m the thrfomfotrioiatiKevideiraiix of a crime 
and is provided to appropriate ffdateniill iawenrtifereErranti & uththitriti es Domestic 
commiiunnikattmits, iimhlditigg:arammuakiatiraiMf a target who has entered tttaellfriifcdd 
States, must in general, be destroyed ippmrompf tiijipnuimlmtesDIRNSA or the Acting 
DIRNSA approves ixeteMianof the Gummumdadtionfor one of the limited rraasouss 
listed iinSedK»nn55ofNf®Ass FAA §702 minimization prooetaES. | b ^ 3 j) p L g6 36 

(U/ /iTO * UO ) fffflriitttdlljgaMcecoblktstedTom upstream Ilitesiittfettfllsfecti on |Q l aityMj ect 
to MCTs, NSA mission analysts must identify and carefully rroww/ccdlterition 
contairaniiting MCTs made availalblte for analytic review.. \WMideNSA automaattaiallly 
segregate OEetfimnMCTs and does not pass them to repositories anaassifiMeto analysts,, 
there may still be infoisrattikin iinssawieMCTs that is not eligible for retention. If a 
discrete aOTmmauniatitionwiriithian MCT is not to, from, or about aittaldeddsefatototob Iku t 
otherwise ooawtttaiB sfdkarieigiiiii tidtirihgendeftrelYaliiKiat i and the discrete contunuriinathmis 
not to or from an identtifraiMte tlKJPo® l-aippcrsaii'ceasoabbl jbdJedicdetb be in the United 
States, the MCT may be retained to the same degree that a discrete omnmMomriatitiDn 
could Ihserctaaiudd. If any portion of the MCT contain® aadetamaetiti ccounmmuakariiorth tthe 
entire MCT must be purged, unless there is no underlying onmpiMaaincei irindidenand 
DIRNSA ajgpiwreesa ddsstioJulrom'aivQiKer. 


(U) For selector® reeanovddfi'om tasking, all commiwnicatMins, cotWlleoidda Mtetfitheataiget 
no longer mcattsthe requirementts of FAA §702 must be identtiffisil for purging 
through incidentt rcqwDli&iggand the purge adjudiratfam jpraresssf risea ItbeP irigrgsexaiakin). 


PosHtegprii 


i 


aWipa 

entered] tithe United StatssL 


■sector ^ ffluiTOcmcations. RBSA has 


controlte^adetate trion of targjste that may tax© 

1 ilmi addition to analyst rayieswof 


m 

Hi 


for mdteariOi$sthat the us 


l(b)|3)'-^:L: 8^36 

(bK3F§0 USC-302DW Sta^.1- 


immediately dla tafelsstItto eg wrnniinis c tedenfoand | Isendssaimessage tQ 1 mi'ssioii 

analyst® notifying t fcamthat the selector has been detoted]. It is the amdfyttS' 
respemsStoility to identify and detask additional sssteecfcorsfor the target and develop tlhe 
informant™ racers ary to produce an incidentt rqsprott. Though NSA may not have had 
prior notice ©ftdeettugattss intention to travel, FAA §702 may not be used to target 
individuate iinthe Unjted States (see due luddism I&ppotitingssetitiDh). 


(b)P>fl?LL. 8E 


T 
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(b)(1) 

(b)(3)HP.JL,8B3E> 
(b|f3)H5® USC 3024(1) 


mt 

(b)p)HP.lL.8®S3®6 



17021 


(U//F@@@t Postt6arg®iitigg controlte^wDobdic selector review As di 

earlier, NSA isimpredd to regularity tkw alii sdkmars flaafedi uirodar FAl\ 

continual© to meet tEmgptihgj nastjummeotiss. In addition to these ongoing reviews,) 
defamfc idlltfMA §702 targettkg’ to aone^atai'reeidow. To maintain f&rrttlie 

target, imEsa(miaan^^tstsnmaist<^ifibmrthitataaainhedcda$ksiigiig ofttte selector is; 
expect©! to acquire: foreign intelligence rdfowartt to the 1FAA §702 certfficsdfaTpi mmtor 

whkfe th@ (^ 3 )"-P-L- 86-^6 

(U/fFOUi©) Table 27 summmmaes ttise post-tta-gsting ipm\isj«nss oftHs; FAA §702 
targeting proceduurex airedi tHtecomitoJdsirapjWoraQtUtld by NSA to maintain coroiiplliuiraa:. 

(U) Tabll® 2Z7. FRjsfrfFiEgi|itirtgicpliSictiaftsisnandnd Conttols 


ProvKswam 

Control 

t PosWarg^Sm® 
analysis iSfpaTffemnn^ todetadt 
when a person, reasomsHd^ 
believed to be oiitsikite the 

United States wlten targeted, 
has since ©lrtteratt the Whited 
States, His will aiftaw NSA to 
take steps ctepraait to prevent 
acquisition of domestic 
communicator!® or the 
targeting of a USP. 

(U) Analysts are n®jfljuii®3±l to monitor (toltedta to determine 
whether ttottagpitaD^ targeting aariitoitBB . i FTOtluctiirmgg 

foreignness.. 

(U) Analysts to review" rmolices upon firnstt 

receipt of collection for newly tasked Internet selectors and eweny 
thirty da^asmrrrT^^ withi the date of first (tolteEtim after tthie 
last review. Itentflteisa^eppa^ddutiirt has team 

reviewed, 

(U) Annual! reviews ccuDfirfirmnn that a target imrarrseiifgliittefdor 
targeting and continues to be expected to produce foreign 
intelligence relevant totltera^ §702 certification under which it 
was apprdmall. 


/JOiWOE.! T^\ I..1GTA nyew \ 3 

(UTTUIJJI tLL 1 © UvJW, Jl WLU J 

NSA will rauflimelfy 
tasked selectors with 
information collected from 
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(b)(3)^.»L. 86-3® 
(b%3frm USC 3024(ii)) 


—.- .. . .■*““ . 

[ ""|or dellaslkiiniig of the s^ladtoraricti purge of 

any o<omi-<i[opirirjc|d 1 GBittcooniTiTnoioiro tio o s. 

/OUCWUlL ttr\\ MCA wuniillH murtlntAlw 


compare selectors tested 


tSSfflWfl NSA wiilllC 

^for indications tatt aa 
foreign teunget has entered got 
intends to enter te liihitati 

States, 

(U) Automatednotkiees aresssrtllo mteoortteanS llftfttl. Imtereceipt 
of collection ftormewHy ta^d Intei/net 1 selectSfe §F)9 every tfiiirtjf 
days ©sirrm wiiUn the date of first collection after the last 

review, nine nnailtmB i s&r imtHilocdllMiMJr ftasbteeen 

(U) Iffdetermines tttHJtaa 
target Bias ©irtteresti lie Waited 
States, it will tytettirae 
necessary stogqcBB to assess 
whether ite incident n^ttT®s©irtfe 
non-compliance with Ute 
targeting procedures and report 
such ©trainnences to EDtoJ and 
ODNI and pairgperetetodd 
communications from NSA 
databases as required. 

(U) See tte IhrodetattR^^ a^R^diihggs^itixm. 

(U) If NSA ddteiinnririnesttttolaad^^ SMte 

and te target’s seltedfcoirs wmm ratt detasked tbefto m entry, it is 
reported to DoJ ®nbODNI as an irmMtertt. DoJ assesseswiHwfcti 
incidents irepresent nonnooiimi^^ prmiH 2 $aEiliin®s; 

and reports such ©Gmirrerrnces to the FISC.. NSA ponies related 
commiiiinijoKiiaf® from NSA databases sffi&rBs^iiBEfcj. In some 
cases, 

collection that is otherwise sauLU?faittt(bq3piag§e. 

(U) If NSA dtetemjirnes that a 
target wto at the fltimne of 
targeting. wae& believed to be a 
non-USP iis in fact a USP a it will 
terminate collection ^tauilt 
delay airdi report the mditoirtt to 
DoJ and ODM and fpursge such 
collection from its databases. 

(U) See fne 1 hncriatterttRt^ecDsggiiitibon aanrabl^pd!fhggs©©tittori. 

(lii/jfTOUO) As soon as it 
becomes ^fflmrtttltoiilaa 
communicator is between a 
person wttno is known to Ibe 
under orivmritmsll indictment in the 
United Stoles 8BrrrhOTaSttonin©y 
who irepresemfe that MMueri! 

In the wiler under iindiidimanitt,, 
monitoring arfftfoedt 
communicator will cease and 
the comirriiiiMiiiiotfm will be 
identified as an attomey-diteirtt 
communicator in a tog 
maintained for that pwirpcs®&. 

tU//yF0B0t Annual FAA training rapiires ttlott suudhi 
communicators be braii^titt inrnmtil^i^y ttoCSXHHDss atttentisnn tor 
further ihrstihijimttOTi. 0©Q ©-mail r^arKfe ©f Swab 

commiiiiriiiK^lianf^.L ]Do| has agreed that the 

process mi^SGti t toq^Emlife rttera^oranriiiiriiu^ issaasatffGoaatit 

process ffair ctaunreatfl^ tlteinfforirtotorii. 




(U) Incident Recogmtftsm and Reporting 

(U) fftr©visions of FAA §H2 cerfliffinaatioirFBB— incktemtt repontthgg 

(U//TOUOJ' The targeting ipraaeiluoss sKtKtethat NSA will conduct ongoing ovomgiftt 
and report incidents affnon-complianee to the NSA OIG and OGC and ensure that 
corrective aaflimrasaardakfemto address dtdfciiKiraiiss. Reporting iKirepiiroctlffor 
incidents of non-compliance "‘Utatresuiltin the iirtemirara&l taEggetipg>f a person 


{bjpHP-iL. as 


(HMft-WiJSf 
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reasonably believed! to be taatted in the Uliiitteli States, teintentibnail t{isg?etngg of a 
USP,, car ttiedrite o titio ah iaaqq uriti on n of any fflaannuuiicaJutaxun in which the senior aaadd all 
intended recSpncnotBB arc ftmrown atttihetimee of acquisitiionn to be Ikxcttted wiAhin thee 
United States,'" NSA imMtreppotthtetmoidHinntwiihihitfitEvbiisuieHKsda^aydlefiilttpigiing 
about tarn. The Aganqy must ppinggdifanru tit si datotese i itidmnntaJh) lacajxqmdcdb >b y 
inteinittibnidli,ytaaEgtinggaaLISBR)ioi pqie®iDBDticeai9caBdii^bl>eltedndv'ed to be outside the 
United States attthte ttmHffiaffaJ^^ial^g. IfgmSttatggtitiggaaablyisissbhwa/ShdtatftfectitggCt 
is inside the United States oar aa USP, sofustiimi must be terminated wiMnaiuCd±4%y, 
Inadveutteittasqpahinon of domestic comHiimmhaatimssiiscidddeessdd in the mniinjEzaioni 
prooeduEffis see thteFfitoggesaadrinh). NSA adten lejwmtte indkdtentts of non- compliance 
with the FAA §702 minimizadiKMi fmatedUreiss. SomeffisampJfosriddddininonplptetc 
miniimiisHitsni offfiSSP information!,, iiimqpMfejpear rparaess ofrraw data, and techmiioll eratisn* 
that atftots^teOTsccartiKoddsocyecithfeddatasiiHtehsa^tmUDriohe^Rdndiekeciiiifetdrcd 
destraatikiaii date. 


(U) hiciwtemfi repurttmjg coarrttoJis 

(U/f FOUQi Trairniimsg and imaiHgemaotit ccoranmuinaiatHm seiespipliagezithdifefaeltiaha t 
incidents cam (Wtem'afciaapjppiritil in the ©dlbeutinn, tta^teing', chssmHiiiinttoon,aaceess,aadd 
retention ofSIGINT commratefttoras ctnaUsBteesSltih nriptptatiaBce of immediate: 
reporting of instances of non-compliance. Individual!* do not have to prove thatt ta 
activity is noncornpiaitt to report an inddemtt, SV wofflte\wiHthhanis®siniteiariBirthhtit 
reports tfhema&tter to develop an indidaitt neptntt wrtHroorpliltKeaaddaacoraiste 
infonnattriem. If the iundifentt iinwfcss a system fflraassyttenfo’ ^ppEtscfonafiaitee, TV 
involves all appropriate sattipxtl rarcttttaresppaik i i(litloldidgig SID, SV, TMhasiald (®0T)) to 
assess tHusittiaEteixroi iaiialiicahlut^dtksffffei^roooiropipii^ condnddiethothuthgi'i ty, OGC 
informs IBoJ and ODNI of moderate; tat may ihiditeatenMnsQoipIpliattetwit'tiith 
FAA §702. DoJ. in coord ima tikm wuith(SENS] inbatethdriiiialialdetmimatiation-'hsih&iher 
an incident is reportable to the FISC. 

(U/ /FOUQ) The OIG receives internal I iiiciilimrappnRtSifimuSSVaaddTW. Notices of 
non-coinpllianffie ((llStbnoxDitiieesJthlaatlBdJ ffltewHbitlthfHSGrarsiadade/arl'alpIlable to the 
OIG. The (ORE uses this information to develop the InMllgteitee (©msglaht (Jtofltadoly 
Report. wHiisHi ikspropaaedd vwihli OGC amd sent to the President"* Intelligemoe 
Oversight Hoad through DoD. The mdidaitts amdii«tiiess of non- compliance are ate® 
used a* input to OIGiirap^itmssaaiisiinmHl^gQoeeoBsraigi^trawiws. 

(U/l 'FQUO i)- Tte taimudl FM §702 training required of all nmdireiiiLmits lhaittllh|g 
information! obsahiad MimdortHiis auHiorty/ aiddnss^sihciddomtreceggitidKRiirepqDnittgtg, 
and puMtesaiug. It defines two types otfi-eppcEahldceceamsirioixldumts ofnum- 
comphamoe ami oiiraigess in the tEaigaissststtatus. 

(U/TFOUG)) Reportable compliance mcinSerrtt An FAA §702 compliaimooimtxMotit 
occurns wHmi §702 statutory requrroisentts (mttagprihag tatiold 

minimtaMm ptomsiliuee soo hhsi mntteLmatraliailgl 1 jn aooccuea lepEqsiarsatimtk) n s to the 
FISC (nrliras^llihdswseamDptptfoftirarMtdnin mmanneDrmntsiatentittv'pbpiwsous 
represasnttfltiffims tothelREBC. For ©sangdte, ifM&& tasked afftraigni iiitteligprwieettiagget 
reasonably bdiewod to be outside ttfuUiriiti«dd SStaessaatltfesti trime of tasking and later 
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leamroal tHiat titetta^tphlaneidd to travel to the minted] Stnaastton tdilddran tcklctakktbbe 
selector lMfirashhaateg^a& 1 emnyrinintdithe United States this wlU be nepatEdi as® 
compiamKE iimditirntt, 

(UZ/ PtMUQ -) RepoitaMc oommdliiaiBB; ihraiifentxsnra^yaldsomsalit ffiana actions totem % 
commaiiiiiimtiHnisecrivaepipw.idei'ejs. For oeanpite, ptsttidthrr armircx’XDiJidld aaaisBC 
distribution to NSA of conmwrriinaianss ffoiseUemmsnDOtato^dinddfer FAA §702. 

(U/ fFOUQ j) Change in taipEtt statues After ttadiamg sdkatQTs assooiaedd writh iatta-gett 
that meets all requirements ofttta: targeting procedures, MKAmaqyiddotif^y 
inforaiB^imi abbot thfc tercet ehlih»aS' : fflS)tia^aUaHtoteh®iindneltarg0tigi@idgciilaorei®ra9,vas 
made. This iteffiarmaiimimayLy^ aslisSBSP ie iloededalimitlia UtoitUhited 

States, making the tangstf irreilggifticffirr ttaigstihg. These (tHtartgass iinttagett ^status, 
though msttinoritotus of non-cnangjliaitec, musfit be reported. 

(U/ fFOUQj i I ncMternttrc^jgiwtili^gaad otlcojcoxraein^aittatlo n SVhasaBsagiiffbMtroWe in 
reporting incidents of non- compliance with EAA §702. SV dwadfegstdl an operating 
procedumac that aditl-essESStlifeanrailtiili&iplanBiaBSis of incident discovery and dteaafctdoiiss SW 
peraotmull follbw for each. There aeettiieeq^pnmi^rysQorneesti'&'mmliluhliSSAimipy 
identify incidents: 

(b)P>ff?LL86e®6 

• (UA tTOU O) Detask mottiitiikaiixnrs -fapiddcoedd tbfy fUW ^ vhfem ritMion personnel] 
remove ssdfeattxrssfftnmcotldctitinn. A detargettiirg lKtatfoni %siasoociffitdd withh 
each imsdiilfccaiimi, ssonae ofwftiitHi may nlidtkate afctatident, e.g., ttlteiusarr of the 
tasked s^hmtoihhastisemddntifi&itdafflaa .UISP, 

T]t&rg^s that ispipoar to have roamed itatoa the 

• (U// FOUO jr Conrammimaitons of incidents rqNMtefi by amdijssts. qpeiyy 

reviewers, and (sritorsimm^Medd nrMfflMftongig:cdtdteEtici n. This 




bjtl Gr 
S)(iii p -p:L 

ttePrSh use m%m 


(SlfSI/IRlBlLTO USA, F*flE¥ f ) For each incident, SV works with personnel familiar 
with the ocommiorosc to create a permanmtt nts33srr±iiroiiMiiriggsiggitiifiaari[dd utdilabbutit ltiic 
inditont aantiiMa-a'ashltid fflpfcfee^ataplpiethdie selector, ihe inttasdfedl targtflU | 

method ofiinddkift discovery, detasking information, and 


tSates of collection to be pwgftdl. SV creates tamnttry in the <femitese of selectors 
association with tfeafgeJstlihflthiaa^Q-dsanieddlniDtalhtJhitB&cSStaSQsrhafeatedffien 
identifetdi astLftf ffte to identify selected as^ikttati wiifti ttia^addmififedia&tgtg&tiBi^ 
ocaiTtain criteria. [ la emuaiaites auwsttice to analysts 

entering .TRs. ThisemtT^issreqniriafddd^TciiiirieMnBts Mfr itify tafarget located in the 


United Stafesil 


3 


or a totgait iittemtfiadd ass a USP.. 


(b)X®lfPLL86®36 


(UFJFOUO) TV is responsible for ovensaairg tttensqarriragg coaoldnritiggation ofindkdknttes 
that afllfoffi TD personnel] asrold ^jsSferms. For eadti i ntdilictU, i nffonrsaabonreggaddisgtlthc 
incident's root cause and imtigtaiiun iis^HeeecldiaMldcldoomeiirttetd. There arecf&smr 
primary waqys in which incidents in TD are disosswedl: 
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• (U//F OTO ) Tcsdhriucdl fsasumeU an'aanid^ttsffindd cfettatHafidasioOtpiwptaetfldd, 
labeled, <mttms£icr®dd aa ee ppetastd, 

• ( UA TQUQj) /Audits of queries submnaitttsii % TD personmdl arne iKjpotedd wltem 
they do not (Banq}^yv%WllthhffiiininuBaBatrioiprpcedadaH;cs, 

• (U// FQUO fr Upon and^siss of a system fforr TV certificaSiam. irmtaiaess of 
potential! noiKaimgl I aaKcee areaeppotKldd .aadd 

• (U/ /ROHJQ) Tectaakail penssMtndl self report mxdctiarttss 

(U//F 64J3)) ) SV and TV provide the iinaiikntt neqpatts to OGC to assess wHuctteeithfee 
incident itsaaimaHticr of non-esna^lianec witih tfeffi&A $7EQ2 csBtiifeaianss aaasftiaggtitigg 
and mrairimiEzaiani prraeddiwesiiaiiiisiiEpspoibMjle toNSA”$ overseers (see dteGBvcs^hht 
section).. 

(U//F 0ftJCD)) Incident mamsdfatiimiii Several! types of activities maty be necessary to 
resolve cHBni^laaniaccinawSdotasairicbhaggcsihisiaiata.sXcfoexaiBipiplcddQtEkskigi^debDotors, 
purging communiicatiKms indlglbfct&iret^otiidNaii.recaltihggd&ssmitiffliifsidrapsqaaistbabaded 
upon (Ciummmicactaxrm s subject to purge, corredMg $ys®am emarss, asntld ffliaiitrihgi. The 
actions taken am;cteatumont dd i tin tltb dricididtnnepqooantin d : if appropriates. tdtemflicec of 
non-enanplliaiaee tilted wittii theffiBSC. Depending: on the magnitude of an incident of 
non-OTngilraHffle ((eg.^uTsyytamneerwontiftotgnghdi&fictiinrangigiftitf'^tjiigi iwmcxHtetds), 
the FISC lm^re^iiirietsiippIpkomunlalepEpfCfrtaiqir^DgiFess in corredting, tfesimaterr. SV 
and OGC cooiuSniatte suidh repoints \witiiCBd.liaratiOQlDNJ. 

(UZ/FOLIO)) Table 3®ssimnnaiieesthhdri<niddttMepqiJdit^iprpwjsiisiie ns oftlte FAA §102 
targeting procedures amdl the oornttndte inmiplkmuntedl 1% MSA to maintain! oMEogdlknuee. 
TheprowEaim$S£0Kdi«ECMiimQtaddiriithh©viamiglgh&iHhdarapliiahanciEqudpttira3nKsnts in the 
targeting procedures. 

(U) Table 28 l. Incident Repotting Provisions and Controls 


(UWF&TOT 


Provision 

Control 

(U) wiillll conduct trampim® oversight 

activities srmctiwtfNl make ntfflasssBBarijy 
reports, including those relating to 
incidents of non-compfiance,, to the 

NSA OIG and OGC, 

(U) FMk §§TCE 2 torrifreB aafatatesssaessihraaitantt identification, 
documentate, sarobtltteeppcnoees^ for self-repcmlliiiiDg,. 
(U/WP 9 W 0 ) SV and TV dlooiiiT^ 

assistance of the irndiwiidiyalls wth© iditorbilfirfesldtillaenme^ilte®raenrcd 
providetttn®inrftDrrn^tom to OGC tor ireviiew. OGC, in tum T , 
fQitwards ire incident to Dot and ODNL 

(U) NOk will ensure ttaitiwiss^^^y 
corrective actions aretten to address 
identified deficiencies. 

(U) The iiTFcdicitteTrtt r^pDastlckioaaraet^Ls nn®QSEiio®ed:£tls^ertoto 
remediate the incident ((®®,,otfeite^krr^g sainGii purge df 
communications)).. 

(U//rO<reT NSA will rnpmto DoJ M 
and OQMi^ 

(including over collection)) kt^yo^teiltaFricc 
communicates service pciwdfefBs 
within five tjaasn^s d^ss^tter 
determining non-compliiance. 

(ftJ//TOUO) SV TV. and! OGC nrarnai^e the incident 
reporting process to assure that initial repHTtirm® is 
performed within foysmiess days of the yernirtfFrfm of 

non-compliance. 
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(UJ) CftMtatitnon 

(U) NSA’s FAA §702 miniimizariumi ppnacdatairesracpajuar that colledtasm crfldfenirattixm 
by targetiiimg raonUIJaBsrBaaemabl^ybdl^ie^da be outside the United SMtssbe 
condwcteil in a manner designed, to the greatest terttent fdksiblbleto minimize (the 
acquisitfem of informatisnii not relevant for the purpose under wftnrfh tltbecolibetitirmwas 
authorized. Steps to assure that acquisition meets this raqquicemjeti ts tgtaitvirihthatgKget 
reseamdln and approval and the detenramimttran tUaattllibepptirppEsddatg^atictetsethe 
criteria for eligibility lUMkiterFAA §702, NSA has incorpnattstl aditBrinahiiteasaaeseaiin 
its collectiifflm precem to comply \wilhtlhssllimi4iajkin. 


(U) Collection mechanisms for FAA $7812 communications 


(U) NiA ha§ twe rfft&tesMS sfdjoF A A §702.-1^ 


(&1PHP.L t§4» 


communications aaceobbtaiodcby the FBI through commpdlM caNhetitioriifooni $S?Pand 
include only commimjxtatiniis to which mtte&c&lssldclcfcire a party. For upstream 
Intemett cdlltecttiisiii and telephony ondMeotiop 1 1theomm unioiriantiioacisa'cei (prqirideide rs 
who control! thtettdteoflMimuiuirutiKDSianftSatJttia&tureover whidh the cwmnuriiiaaiams 
travel are legality cconpphMddto make available to NSA conraoraikattroiis rridatddto 
tasked seiteoDOTS. Upsdmemm collection of Internet-based selectors may include 
commmBDiiEarihms to or from the tasked sdtecttnr, as well as commminniiiartroTss in which 
the selector is referenced vwitiiman Internet transmafom. The latter is called “abouts” 
collection kteaaissettiaecomnmuriiffitioiKDris neither to nor from the tasked ssitectnorbut 
“about” the selector, i.e. the selector is contained vwtthimtlthe:connonunjcalron. 
CommiJDiniixaltcoiis aaqqiiieddfrom telephony ssitaDfonr saacaiafolyto or from the itadodd 
telephone numnitjbei(i.e. ) “abouts” collection is not a factor)).. 


(U) Provisions of FAA §7012 certifications^Htfeittsrs 

f) NSA’s FAA §702 targeting pnoteidurcs s&tetc thdt,f- 



mm 

(b)(3)-P.L. 86-36 


;mpl©)i "am Internet UtoOsscdlfillterto ensure that the person from 
whom it seeks to obtain ifiroe^iiffiitdlilagBuediiiMwmktipns located imaatfap rigan 
countn.. 


(U) Collection! controls flbm'ttefeftJfrmw and upstream Internet communications— 
communications not to cnrffrmn the target 

(TSiVSfWF) [ I _ 
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(b)(l):-:P.L. 86-36 


The providers siirodttlddhh^toohyt^ooiimiuidalaOiHHiariaittBtiJtigliaiiesjriitsritertQ NSA. 

(U) Prroi&oms of FAA §702 certffiBsftiriwris-aaa&fyfes of sete«torrtdigei*itgt$tatahus 

(SIHBEL TO USA, TVEY) NSA's ffAA §702 targeting pm^e®sssefifcrttiroiteeria 
dating collection on a target. Once a target's selector has been placed con 
collection,; the Agency continues to evaluate collection and use other tools to identify 
dhaanggesin the status Qt lo cation of the target (e.g., change in USP status, such as 
informatkain itteitthe individual_has been granted (pmmwntriresideinfetstafiusiithe 
OLFttided Stales pr informatfaani tltofthe taagsHtis entering the United Sett®)). If these 
chabges occur or-ittis determined that tlhriarget.is no longer producing fenceign 
intelligence, the selectors removed from collectiton flhdifeEg s in targeting status may 


be processed iinmediatefy upljto identificaamm iinlSESatAsystienia 



W 


ZJ 


] 


(U) CoHecEttcm controlte-vertfrafiCiotion that coltestthmn is for currenrttfytdatefedd 
tai»stbs 



fl-loor each source of collection, NS A employs processes to determine wferthsr 


lploys pn 


! 


fflhbnziirbr gollggfid#. 


| are sendftigg gQkniuurostitit^ispnly for selectors currently tteflkgflarid (fr)j ftft4- 


g| 


(U//F0BO) Colltetatconn for tetepHrctny/ sqleotors [ 



fTTS i /i ' S I h/WP ) Upstream mnlltedibon for Intemmattbiaaselcfesletetot&rs [ 
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wv 

(b)(3)-RL. 86-36 
(b)(3H® USC 3024# 



(BSli'r 

(b)(3) !iP. 4*86-36 
(b)(3b$& USC 302#]) 


■ (TSHSSItMB) A situattitm km$WB as t-""T. Ilean.remlt.m.the...... 

uninitia^ fla&wMtoiof nm-- 1 : - 

A l ^ I n§A implement aa\mft@^cn 

PeeSS to address this situation that is another aH®ofclq^fifi<DiBmd^ 

Internet comifnniriirattixms aacefforoaafdddo an alyst-mamsifiMerojffipii Mitwte for 



(U) Pirwi«ii(!tti» offlFiiMft§§fi0E2 oertfifeBcastiopjasm-upstream Internet t hat n&afl toms 

(U) Background Upstream Intermat cofecriinn iihnldddssaaqqiHSitirorofotftwcryf^esf 
conmmiikattoiB not present in downstream aidltettaran :“d!bfart!ift £ ffimmmmittEtliisnand 
“multiple tffljmniuniatiioastramHctaliitaYs'fMCTs).. “Abouts” communicatiifflms aaee 
those that are not to or from the target selector Itatt mfasiE comUBrasnaioliccldithe 
selector. For example,, if a target’s e-mail affihasssis within tihebody oftlhc ThtEmmet 
commranikariiiiri Haetaeearoththeiiiriididiiiilsilsi] ahemmimuaitnition "about” the selector. 
AnMCT is an Internet “‘transadtimri" tiMtaMMmsirmGErdiahaasne discrete 
commairaraKattion. If one of those dl ROTMteororramanj a titi on sis to, from or about a tasked 
selector and if the active end ofthffi ttransaettion is foreign, tdbe ontiiice MDT ttiairRmittiiami 
will be arapiiKsil t ttdmiuiile [it|t>BtEi<ranfin tbrtejtneCi kiotteati.orThis can include other discrete 
conmaounnikattirnss that do not contain the tastedl setbkotor.If the targeted soitectoris not 
the active user indfoetdiauBauttimi-the MCT can include other discatate eormnumcxathisas 
that do not contain the tasked selector. 

(U) Provisions NSA’s FAA §702 minimizattiimi jpraeddiafesrcqqiiisrd^SA to: 
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take reasonable step pasit-acquisition to identify and segregate tfaragjh tecltamioll 
means Internet transactions that oimncOit Ubemamjiaibiy i ddaritffiiddas containing 
single, discrete CTmmiimiicrttiiOTitt; wHerec: the active user of the ttmraanrtian (f.iee,. ,tUne 
electronic assmiiiuiiipatianK asrawnhidddcs^ inseddto send aarmsKBivE tWae 

Internet transaction to or fficnm ai6eet’ideeppDmddef)isi }bdieliaxfe<lto be 

located iinrlhe Unrated SSaMe$;ODtltbddostadomf the active user is unknown. 


(U/ fFOUOj Internet transactions that cannot be identified as meeting tflfctB afamwe 
definition nmatt bbessggcggatddaaddadtHioddn an access-controlled tepfflhniy from 
which transactions may not be moved, CTEtqpt far pranoessiing to render them 
intelligible, irailsss t hkreya iserd deterraiknidi atctD contain discrete c^nmmuiiimicallions for 
which tihe santar ami all intended imijpisrt&; aacercoaecuaht^ybbliheisfido be in the 
United States. Any such ttiairaacriaiiR imxvcddto data napssitnifes acipessiHle liyy 
analysts are required to be iihmttifedl aadibaiiggbteiiippavkioHHl^ejaggaga&i! 8 NSA"s 
FAA §702 minimization pmetess also spsKeaftytlthtifl jntnrQetittaaaatiQDasaaifquQcid 
through NSA’s upstream Hnniteamiiett colecfliM tterfhriipiKSson or before 31 October 23D1H 
be destroyed upon rreogghjittcm. 


(U) Upsttraemn Irttasretedotledboitiion controte-mo1ti(M(ple coimnunitboitiDn 
tomraatboBS 


(TS/ZSI/iNl)) Effective January 28)02,, NSA implemented aajpnaiEESss far amaHyzing aautl 
processing upttraom Itetenretacdltettumto ensure tttat <jaadi^yNd^TCTTsdcbfc«S4ihtl|Iy 
domestic cuimmuriiiattanK will telfaiwfradtefiffo^ process 

applied to all upstream daffisi that bad been sequestered stUnttirg lII%vamtisBr2®QI. 69 
Three criteria ate uusail to sort tlheste imraunuriirattiuffi amtl (totaimiiiE whhdtbeit toey 
would tewiittliuUtl ffonniiuicsiibyiiaaial^st^ sCspqufcstecleiln a collection sttote)) oaisemtto 
data stores accessible by analysts: tte of communication (discrete cadSNCIlJ), tithe 
active user ofttim selector, aitdl tike Itocadkwnn of the active user. The minimization 
procedures rapine felt seagmrattemad atmmmm cattraiss baeaacesstfetteo ol>l ] 
l ersonnel to determine wkettkar they may be authorized) fan: use: 




(bill)) 

(bJ|3)HP.U-.886386 
(blPbSS® USC 3024# 

'mm , 


"NSA'iipamaftd the~ FISC,' adTF/S&lpiEr upstream Ibimaimat ttnamsacttrbiiB, ataqumil 
before November 2011, whether or not tlimy warns weecedditodd. Additional 

controls are required mfani MCT$ca\®IMtifc to analysts ante timed!, for esamnplle,, to 
support iKEpirtthg of foreign iimfldliigBiKie (toetttoeSbtriing aadcDUisaumulaltoisc£mir:)n ). 


** jrn«0jfeh the minimization! procetaais permit NSA to pass previiswstly sep^utetlcomroiwiEtUam to 

reposittrres accessible to analysts, NSA has not done so. 

1 th e only FAA §702 dataforwaidWto 
^Jor where the target was the active 


* * (GPM/IRLL TO MSA, S ' % CH | 

analptt-flafflssbssiblle reposhtnrhaswas data[ 


user. The Mn umdlmwas sequefltBiaridpendimii development of decisikoin logic to assess MCTs. The data was also 
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(U) TdMte 22^)sminBiiinafiit2izcst Itfaetddjdkctroprqis'iwdaisn s of the W/&/& §y?J0t2 ininimraatoon 
procalwas amidi the gmuoIs implemented by MSA to maintain commplimmm. 


Ca/i'SP* w/reest 


(U) Table 2b. Collection Provisions and CCorttnUs 


Provision 


(U) /tapfflttam of informafatn 
by non-USPfe 

reasein^li% Mbxsati to be 
outside the limited States wM I 
be cetmdto in a mmmr 
designed t tot Iteg n t 

feasiiblle,, to miirmimm tfe 
acquteiteffl ©f infe^tmtn mat 
ref@ya^tfctftee pyf£©§§ far 
which it was awMrized, 


ItiW) 

(b)CTHP.L. 86-386 

(b)mm use earn) 


(£,■ -■S-r' * W) Acqyiisi®rm of 


mm 

(bJPH^U-SS^SB 


cominriiuiriricEattflJT© ntotttooifrfrarn 

the ife&tgatwulll ©nflJd^yaan _ 

: tatemfet4totea:cAKttltfeF M . 


Control 


ffi WFQUQ) Targeting} eantelte |g©©1MJte2S^^Effiifeie first 
m easiuirT^s 0 ®irT|BFbd )9 t(bd i hrnili fcasiWketctlnD rtotc^ciDiDm mrija^ctiaitiH^ s of 

targdte that nrFnssaSttltteQ"®qqui^i3n^H^:3t9ofctfi^i etaS^^^^gDipsraDsaitjtfBses. 
The ffansgjrnesss r^p^ticeiroeWsaaddMlbpcpsJdhftgeJeyng analysis of 
coimmmurriG^tGnss s^iT^^etdorriiTrtiTnn^ otion of cominnimi^tii^ 

not mfflmm&H ftorasjCFqi^Si^n (^ogg., <±f3®riTeefebaccn™miTm 


I cjiwn f 


t tfpougrr 


^TFTT 


1 


fljU/ /!~OUffi I nternetffloM^lfftltonirog isipeftoirmeeltHr 


on cdlteqatflOTiir 


I 


TfB 

II $ 

J e 


(U) 

steps fpoc^taaic^jiisSitwsn tdo 
identify saTtosegg®q§M4htba^tgh 
techniicall mearmslhtton^t 
transsHEttanm tfii^taaMiHbbbe 
reasGHTUGriidiy itentlffed as 
contaiiniirm® singte,, dfereite 
commiuimib^fora wtteeettte 
active user of the transact™ is 
reasenail% IbeliisMy&it to Ite 
located in the United Sfette or 
the ItedtcsTi of the active iwssrriss 
unknmrn.. 


- fGiTOiivi'jr n 


( tcTvinSJ that attlte&taDiaeeedd of each transactor 

SBfCtoctions meeting this oiitefism stailttl the 


I 


T 


|il// r0U0) NSA liras irrnqitefTOffiiiti^eld pproc®3tl]LiT©$ toamaiyze 
upstreamm lnt©niMaiD±IMti«n. Only atisEroite tarm&actions arti} 
MCTs mi^tn^ceetdmncdtoeaai®r©iacteJacaeseife^1etb» analysts. 




8 b-3 6 


(U)) /Rj^qacoEfttbeBes 

(U) Provisions of FAA §702 

(U/fffOmorr NSA's FAA tcaigariiitg ptsmtiimss mepureethhatNhSS^st^abilsh 

processKssf&ieaHarmggthhat raw traffic isHdtelbddaaMtlsSticardiolylyniauabdiaiadcd 
repositoms md iiscoscosssfobdc tOTiilrl'y to those who Ihave had p?®|partttironihiiipg((;eealthc 
Access aittlTFaihmgg seedboDi). 


(u/if B w e p 

/A'Fj r 
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(U) Conimolf framework for access ttoFWflQf^?022reppsailciiaa s 

(U/ /POUO J7 Sava-all ggntmll pgtBgtiim&s aareceapjrig>yddto ensure ttatIFMe§702 data is 
stored in repositories tthatnraefeElsanddHhlTor security and compliance and that aanssss 
to the data is property oonttaJltdd. From the time of colle ction- data is processed 
through interim systems before it reaches the apflMtwcfflfl ssxsmceesy^tcera sfixor 

FAA $702 reporting;. 70 The iffinaa miferof this -sectign describessftnurttyflssof controls, 
focusing on their application to thq | | T .,,, .., . 

(bH3H c .iL.8BBS3$6 

• (U// fOUO? System samniity aacorddittitiDn, 

• (U/ / F OU Q- ) System cceaiififiaiatioji. 

• (U//FOUO) Ehta flow mmijagameiti,t.and 

• (U/ /FOUO) IDhta tagging. 


(Uy/FOtf0t Approval) for MSAs®sten® tto®tinee aimd process FAA §702 data 

(U/ fFOU ei AccredttanisMi TS is responsible formnnKjghigtlthQ'iiaktoroalhWSA 
networks and the computer ^jsJtenssand devices connected to those mBtwwflss. TISS's 
responsiHHjtes ihctUalBte: 


• (U1 JFOUO HSuifling. ppiooitiiakiggand overseeing the development of 
information aEmrtmicepprggraTnsioem«Ha»r}to ensure protection of information 
systems and networks by managing rfteNSA Information SjaxurityPRrggrann, 

• (U/1TOUO) Serving as the Director NSA Authoniziiunig ©fieiailto accredit all 
NSA information systtem^,. 

• (U// FQUO) Cinrdlimiiig;iiiiti’annHaorE>^6tnBisetaoTit^tynd accreditation and 
risk management tpragranss,and 

• (U/ /fOUO) Esttdb 1 iflimg. rrraiiintaiiiigg and enforcing NSA informati«nn 
systems security pmlloiissand implementation jgiiflMirass. 

(U) Accreditation is the crifTtriall manngenraittdderaidDtto permit aqpamtronof 
information s^Canssin specific temiironrasiiiteaaaaccppalaMdckolelofrisk, Itercatlon 
the implementiafcn of an approved seat of technical, imnnagBridhand procedural 
safeguards. 

(U//FOUO) When accrediting spttams, US ivKESStMjeNilatioahlnhtatitutof Standards 
and Technology ((NJESnj) R^KlAMragagecneiit lEnatnewbrtei determine the appropriate 
level of risk mitigation to protect systems. iiifhnmiatanQ. and inftftotncttwee. NflEST 
Special Publication Guide $:>«• Applying, tHwRUtiMdmtuggmmtitFirmtmwfikk to 

Federal hffmnmihm February 2010, describes the six steps in the 

framework.. 
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• (U/ /FOMD1 ) (Oafegpriize tlfeeihfiiftitraiado lis^^t^mr^ithdliottniomad pnopOTmaksed, 
stored, aixBttaamanttflddb^jthteS^emrtialgadaaih on an impact analysis (risk 
assessment)), 

• (U//PSXUJO) SdstOt aari imiaitad 1 ssebflfdsa toien seeocityi tyi uramt so fe rftfteth c 
informatam s>yfitom faesil arotSihes(seurritjtycasagsririaaritm t atkiimgigunhd 
supplementing! tltesgcurityv aontsrol btedjlTOataaeiettetl'tbfced’d on an 
organjzatiKarail as®3ssnw»t affti^adddodaiarBiidctiiisns, 

• (U/fTOUO? Implanuoitt tUfae «Bmri%cootrD'b,l saaddlcteaibibc how the camtjraite are 

employ©! witfltam of operation] 

(system 

• Assess the seoutitt>y ©OTtiicsife inisaimgg tqqproqif iaatciiaseessincnt 
procedures to deteraminE ttte extent! to which tteoDjmoli4saaediiap|dmtM*etid 
correctiy, operating as irnfflaanikdi fiadc^pddciogigltihdaid^doducaamHiTOtlvith 
respect to meetikg the sanuiit|y iia^imnmiiSsffoithhes^Eeoiiibincildppoiidotit 
testing by TS), 

• (ll/ /FOUOj) Aiotihaiiiffli iirtfotrmatroii ^secm^ppciatoibcbadodiiancktdcteiimtiiat i o n 
of the uiedk to orgamzafarull aprrateuros tmaldaassDtstndiid'ii'dutdaJ spthdter 
organjzattixsjiits, aixd tHeaintirioira^iliilitiinrfiri)®mllh optpiaratiT) n of the iinnffenmittiton 
system and thedkoBjcmi tHiatttiii 9 -irikk iisiacepptlaMc ,aadd 

• (UZ /fOUQ) Monitor titesscoinitiyy comwckM s in the iinfotmatiom systems) am an 
ongoing basis imdlndirg: asssssiig! aantrnll (dfhmti'emess.cktoonraaritiggcbiiiagi^cs 
to the system on 1 Htcs enwrcawninBDtit of operation, oairodusmirg samnityy implicit 
analyses of the asasuriiaedj atttmgpss, lautii'epptmitiiggtltihffi^wtiryt yststWe of the 
system to designated fflti^aiirattianail erffficihis. 


(U/ iTOlM> | Beforeaasyy Horn i isaathbtiriai:d to be put ©inan®ttw®kk, ittiiraaEggalricraigteh 

the a©QKtfiiaiinn pmi)©sssaadd)6aFpp!V»*d byTS.. Once iinpihmentitdci, ssyfiiemsuare (b)f$)=F,L M--M 

subject to reacar©fflittatain eeOT^Mneeey^s^oKvWranigigfihSnanhadpetgescocChatthat 

may affltotthbffirilskaaseKSBiiBntH. Theofiatt&stlhcmg^iwlriricliihdiEAAA §702 repositories 

are aooreditteH aare listed iinTEddlicSflO. 


(b)(1)) 

(b)(3^P!L. 866*36 


(U/Jf©fctttt)Tabla 30. AoorscHtation Status ©ffKtSk 
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(U/tTOUOJ Ceitffftoatibn In addition! to syst&aam aoumtittititkui,aHlkyystemsawtniamgig 
FISA data mu's! Ite^Etitffiddb^yTW^jtltfee NSA authou% iai aBfftif^nggaatdiQramtd 
systaraTfittoiOHaffi'ahh^yirarairaii^ialiaiU'iUiidheilBgitgaldafGblp^icr^gi^guiatsops^tMtcgtim’ 
USP piwaBjy. Dot? and tftefflS^ara’Ocnibffiy&ii'l^cNS^Aedi^aiBatias qnew | | 

(HJi/'KttDUOr In2K)ffl, NSA begam aBrriffyiiggHFSSA?yyswen s aspanr ofam effort to 
enswnne tHaa ttlthyy-caoplpl yvuht theiie<^ a 1 aiidl jpfliey regutaiiiiK jprfltotiagg USP privacy. 
This iiiutiuliddttifec rapasWroiess .Shat ctiontain FA A §ME2 matattete. PersomMKll from 
various asj^araaatiiii ns withim SID aiiodTlI^^riidrinanidlidiQiiiniaJeccfteftiati'ons. TV 
suMfltpequ^ly assuukiiJadl respraiisibility for ^afemK'eartlftaatioiaialidedekifieqbeelethe NSA 
coipmatecriftibbasetdcn-eggiistdrigig NSA systems, tflk^irco®iiippliiadtt: etsMiftikkimomneli'id 
data flows. It is NSA’’® authoratetwee sscmcerfdbalhlbcnfrtiidiHiaceectifli&iiQtions, 

(b3PHPlL.8K316 (U/!FOIPO)) TteA^g®B§?y's certitffi^itoippi'txH^sicaeraiy 1 y\c^iti^csys^teiTOoOBlro Is 
for ©emfliliawee wiildppi^ai andand age-oflff, daffiii awceess, cgweyitigg. 

dissanrihatimt, data tagginug, tangaiiig, atittiaanbjtiLida IppacussssetEhTtei an sri ias i o n 
functiautll areasciwddftfbttbybdha teMBpRjjedaottsiMi sMiss t6nn(piiimpieaffltegfhttg ram 
ODOC admimiators. ThrOT^intt^pj'sgaatiiccflaptpfaBccecsrififiitatiaaqiuiqanraajcijte are 
devdkgBtd to addmeas naqpiredd cffongiJaflneecoomrfel s. The complHkiuee lmpuieejaents, 
admiWBiktoed HyytltedlW2r«gquaiaBtaBtteamjifioifaithetlbadi9fta- the thfleciatagiaragainst 
whfcUn sysfeamsatieccerat if iitb cfiiararoirtpH emcc. 




(U/fFOUCt) To be certiffiati tolimutticFRSA data, systems tnutstrecebia'e TV 
certMieation tritmK^MieGopipiliaecedHffltiftcatiqiropeQcegEheTbe TV4 eertiMkatimi 
dates fforthbe | ufsht eoitttika fPAA§$002ddatai«ii dvtifoich can be used as sourcees 

to support dfesariinaiatioii are listed imTEMidtS B.l, 


(UWFGtm) Tablte 31. Cfem^liaK&e Certfftedition Status of NSA 


]l 


tff Sf jRCL TO U 3 A rV B Yl 



(U/ITOUOJ TV provided nrgw.'caMppliaoe& <mi4 itfeat nolgigdadaoce in May 20144. 

SystemscxtlubetllirfitilltiieS se big %odannihBinifi£idiiedthinj tbidyevKtiloMthHOwths?h\nkaeti meet 

the iMhwmjg caiWaaa?lBlfKidl ibitecectiftefl etiybjyVFV: (b)$HPJl.{SS9i$6 


• (U/IFOiLIOj Systems with two sugntificant systeim^atiaJddtriictidTiHtsnin tavfckdve 
montfin period or three ttotdJ, 

• (U//FOU0) FISA^sttemstHaiittihae'iEKJiobtercnecQfleflcd/i^itlitwo^oe^iears, 
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* (U//F0UGJ Sy sierras wii Hi a anajacjDn ppgrctelffl Sfreti tig g: onipt pfemcfr i lftnio ti dratyl j ty, 
or 

* (U//FfflffiE Wf S^emsspfdnnirig)go process iuitiisraaiQWAaadthritvt}<e(g.gaddctibrion 
of FISA data). 

(U/I P0GO7 Owners of all afftfen tail ffl Efr& syat muss ware iratt AMI i ii nf d no <2 014 that they 

sMA Qofflpl^ ^rgfication, if theif systems met ifaasa gttiftelitm within s ix 

months! | ofttte reposiTtforis J | (bh$)H D iL.86S386 

, [ are sdtodiiHffitfFo teedecomnriswxnaii and were exempted from this 
requirement. 


(U) Data ffhvw mwiagforaotit 

(C/IREL TO IttSA, FVEVJ" USSIDs define a set of controls and operating qroMsiiuoss 
fortfte Ulhiittedl Sates SIGINT SsySteni. USSUD QSA3511, Data Muyimiihm 
Directorate Targesmg and Data Ifhm Managetmui , defines a process intteidMlto 
assure that only desired SflSMTisdMiwEddto intended uesais initlteHnnffi frame and 
format nsqiirodd. 


('SJ\^ll'lW€ELTO USA, fNfE^j fc l is respnalfitefor govewnjg end-to-end 
nnanagemsiht itf Internet and telephony dhta cadltEtidln [ 1 houses tteacaHsssdfttoa 

naiapagers r-ppUmsible ffttr testing ari d settin g up new dtemfflnwppdthsthdtctt-asasrersdidie 
Sill psanesHing infrastructure.: The |0^ | Data Governance Tfeamgowarasthe 


86:36 processing and distribution of data collected wittiiinNSA’s S3KGIMT system, oversees 
the documentattMni and review of all new dataflow iraqumts.and implements 
processes designed to ensure ttettNSA compliance sttamlfenits amatrakitTthiodd 
througjMsxutt the development odfnew data flows. 


mb 

(h)(3) 


■ (8//5I//REL TO USA, HEY) The Data Governance TEeam nnmaggesthe data flow 
process. Customers immtcompldte Dataflow Management Requests ((IDMFRpto initiate 
or modify dhttoflows. DMRs reqpinE dtetdl bddi tihfnnnadoji i nib a tlidgn ghe status of 
system certificatroam, s^tmtaacraddaridKD rp lpfaspfly pypef data to be processed 

30240) I I authorities %f Qtrife£tftJh,aud 


documentation of data flows. 




given to 
testing and 


nd imp 


lIMEfes aiM 'Qceaklatadchnd approved by a triage team 

~1 iffJeoti [triage t fmhfmuamser, thatOMBrask 

^jQata Delivery megaiizaMawsBsffor 


Wgrgetipg and Tasking and[ 

liintstoation. QDMRs are emnptejalctc onceMIl required approvals are 


obtained and data flows Uasiamse opiaruitorslir 

(U) Data tagging 


(bJPHP.lL -886336 


(U//F OUQ] Historically, ISS^lhKinmnagjdddteteaiBJisasby implementtiiing itasltfcttixpiss 
on data storage, iiiiiilutiiiggtlcbmaseo6'inigicall ddtabbaseppaitifewiBS. Data flows \wsxe 
designed to place data in these pstttirorss.for example, according to the FAA §702 
certificatkam imiiterw^h^hiithearamnmcariaittiiQnwe^fflsqcq'Qil'.ecTo access the data, 
personnel had to have aqjpmpriate tittainiggand be given access to certain systems and 
missions nrettdhnggthe data partitions vvflriaxetltedtotevv^atirail. 
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top smRCTn Sti » i > enao m 


cu/tmm a§nsa[ 


_ \mw 

storing and accessing dk&ua-^lMstiJigdcte^feJppdd.Data tags areeareeat^lSar eadp 
coItaaiitonrrcootdiddQrifW’irigg^thaiabtopit^idBdai’iwHjcthcttiatd.'fiSEa'iStolilieclddiias 
well as several! cottorrpieces of infonimattron ms&lin mauatwimt) ttedata over it 


(b)(3)-P.L. 




erk^i£^^_ 


[ Thus, to access raw data acquired! maator .__ 

certTficaSiTforFAA~§702, analysts must be approwcdl for access to such collectiffim as 
part of an authorize!! nuisiaxmiand fulfil tlieettaamuggrerpqtBmQaenttor the authmty. 


p)(3)--P.4,*fc» 


(U//F OUO )-Data tags also serve to maintaim aEon^ilaaacewith limhattknB oonthe scope 
of queries, as well as age-off and purge requirement!®. 


(U// FOUO) Tafoflc 32 summarises the rep©si®nny ppcx^raonso fotfftbd^AA §702 
targeting and miuimizaltiim qjracdfllraeesand the contrails NSA implernmemttad to 
maintain coMjpllhimffi. 


(U)TalHte 32. FAA§7®2 Repository Provwwm and Camtttdte 


ip/peu<4. 


Provision 

Control 

(U/lffB>y@> NSA has established processes ter 
ensuring tatt iraw traffic i&lfcateM and stored 
only in authorized repositories.. 

(U) All ©j/sttemra prooessiiinip FAA §702 data rnmimst 
complete aseourtiby aBKErrBsdMtton pfoooeess. 

(U) All FAA §702 repositories are certified 
compliant wiiin the legal and policy nspiM'imii 
protecting USP privacy. 

8U//r0U0) Data fftm® m8fette^ptwffiebtiy|cZ> | 
and SVto ensure compliance. 

(lil/TOUQ) Data tags are applied to Ktentifty tttoe 
authority imirndter which ttteinformation ra$ 
acquired. Tttoeteas also seirv® Ito rmrann®®© sbkhbsss 

to ftmU rp.tentinn off Ifep^ta jj | 


pjy /row) 

(b)(3H».iL.8GB3K 


(Uj) /AxoBQSsaiNfl Tra/mhjg 


(U) PiowiisiiDms of FiSMk§§fiOQB2 (saattffcadtanss 


(U) The FAA §702 targeting jproieddwesstatEatehdtaNSA will develop and deliver 
training to ensure that intelngetKOE ppessonel respomsSHle for approving the targetmmg 
of persons imdkrt haataauBfcb«ity as well as analysts with access to the raw data 
acquired ppiranatitto FAA §702, undrasttamil tKbeinxsppoBdibilitisesand the procralhnass 
that apply to this aa^uiMimnn. 
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(U) Contotl fraiimmookk for resthrottiigga&cesss to FAA edited twin to 
authoiriEsad (psrBBtsunefel 


iTOtSilINMfl)) NS A requites that users having access to FAA §702 data have one or 
more credestate, be current emitfcfereroqqiiarifediilmatiiijingnd be assigned to approved 

fflSSieflB. (h)(J} 

<b)(3)'R.L. 86-36 


jg,. 1 ' f rv' m b i Requited (tnaoterthab I One 


CBSMfentials ii'iaeeded to access FAA 


is required to apeess data colfcnteil un 

dorthel 


M&ttrn mmmsk. 

r .jug. ■!////.. « 

p . 


] 


(C f /ICIL TQ USA, FVCa r l ) Obtaining} ttteecrarddetrdlal To obtai n any of the 

| 1 credemtMfe, aarfiqapjefctmust be submitted IR | ) Only individuate who 

bold tthEro^ws&tddcccddBtiahlvnay submit Gamnnennefor the credamlttnil. The request is 
first KC viewed by^lte-Assoriiatte LBiceOJmatefor Security and CounterinittdlligBitEe (Q) 
tta determine xdhaHeirtfeapiqHcQaflthteisatkfiiUdcctaitaBesBckij'iqriceitQricIf approved 
by Q the request is forwarded to SV for final adjudfcattbm. SV reviews the requam, 
verifying that the individual* tscuriEartt on require® training aand that the request 
ratluSefe a v alid mls sitOifiiiisgitfid’kidflpnlJ 3t|l lcqqiMeroeWsaremeh_SVappr®wi^ tthe 
erWktntial til ) |for e ntry to NSA’s wmiy dataitaE, | ~~) retrieves 

ihifomiattdion from | | and-sw^era 1 other corpcsote awbboithtiti®esm«ttBcsysBjretBmthat 

proyide Ithe st&t u sofmdwadiaik’ 1 approoyddirnsBseiTOSt,rai3iiiugi.^nd clearances. Using 


this Slfefltenatioib, 


calculates 


a listmf individuate who 


I 


ualify for 
to detennine 


I 


FAA §702t access. NSA systems use the inforaiaitimn ffinom_ 

what data the individu ate ateeautto tiaeddo access. SID matttah® t ttomiti}oto©itrtyrride,s, 
which dteffitmiiujewbat ) [ veriffigs for individiuafe to access data. 

(UffOUQt Obta itiririTO aaooesss to missiam resoumcnasss SID policy designates 

l as NS A’s tool for the proper astamrifetmimn and implemaimttiim of 


iL 866=356 


access to SIGENTT data in NSA repositories; it facilitates rtteadlninriataafieeppaEBassof 
acquiring aaecessto tools and databases. Access SfpoHsorssuhilinihti iin dimdidudliafor 
access. The sponsors determine t teeafpprppri tcteS BdtNTNTuthdrit^ t Jbr users, 
assigning tUamto a mission documented in the mission cormriktiinn Saiblk, atmraBteT 1 ihist 
of all analytic prodanatiinn c&teanentsthat have been appiaxvntl for SIGINT missitons. 

The table facilitates dtodUaaseaeccsssby providiiing aircscroddof databases nunriMlto 
perform SIGINT nrrasskiBS. The access sponsor nonnoiinatras aaunserfbr access to raw 
SIGINT datatoses. sairaieesqnd tools in support of a stipulated miisMxnn. The sponsor 
ensures that au ditor arc assrang tl to the miteiimito review queri es of mission 

. te te 


audijtablc d^ja. 


H.„ 


tol 




72 (U// TOUO) 


'enoll wits orij 


siicci for HSA data an d reonires Iraining i n NSA’s 


II 


1 d reonires training i nt> 

StaiiidfltflMininii ization Rwace^ures for FtSAinfontnuioH. Later, d iffereat versi ons of lL..- ..I ... 


acqWiwd before 


Jwere esyUtetoddfor irar Hcmttiir Btetoattpric s of PISA. I Ipe i 

e the estabiyhinaattoM ei T etedaiattitiai iit | | 


jnufits access to FAA §702 data 


Tor 

102 
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(U/ ilfOUCD) Maintaifflmjt a nreggs Automated aumull imanud Ippoocddctre sp prekld e 
assurance of comimiiniin™ d feiHiii tM. to access FAA §702 data. Usais tauti access 
sponsors are ig spamaHitc ffiaircoat wviigguaecT's aQeecfiw^icrti(t^oy)itoH8$iraBitictl|iii'pli%rfor a 
missikw.. Eadih | I mi&giicMii is afe® requiEed to have an inteffliigattEK: 

oversight" ®)fficer wflwa performs iptmalidc itmimvs to ensure that inmslikitiiudbs casignasti to 
missaim ane still eligible ftinaeceess. 


/ ....• . 

<W ^-^6 


(U//POO®} EnffenDBinMaitit of required traicnikg is suppfiwttedl %tHu:ppiocidiiiabon of 
automated moticss to individuals medll In advance of their tteamitg awgibaiianddate. 
Notices aBeppoo^uce^ at regniarnnittevvils until the ttoiamirg is competed. Jf training 
expiresJI1ffiindiYi<Mwhliisi0tHointa«diyi}rc^erMwbflxfti©incaee®ss to FAA §§77K? <tosa. 73 


Hcv/fttE tSyfag/t. JlifHKd r 

qualify tfor FAA §702 accusss | 1 


JctdemlsiKsd&aJfyad ilte t of individuate vdhe 


authoritative sewctes^Memstltilafitrptrmlie tttesmttos of individwflss aEtppotyvddims&wms, 
training-. tau d cfteaianuoss. For^atonssthhflusedaiattagagaseisdiftitfbathirtion in 
I l iisgxgmrpiatffiti wrtHittabaldmaa^ap^jildlcd to the ©iMiiiiuniiaatdiinBSbbdi'ocrc 

giving the indM&iaite msssss to the data. If the osar dtessnnol fpossssstith c 
comhinaiMii of requircmssntK iifenttfiedd in the data tag, access to that dktaissddcnindd. 


(U//F OTO » ) Appiratfltrrjdte aamotl adequate tvaihrirngg NSA/CSS Mfy l-23n©3piites 
that Agency personnel complete 1© training annraallfy.. 


(U//FOUO') To qualify ferasnssss to data aatgiimctl utiitjbiraaiFA^A§^M2 oectifiBaation, 
persomnmstthhaetEGaanpiplefedp^fiific training courses wtHirntlthdalast 12 months.. All 1 
courses aamiieeblppddb^y NSA's ADET in conjnmcfliban vwtlht tteGSGCpiims join n 
subject matfcrjcsppiMsamhdiimssbno(mplipiHaocpr(p68B§ieiiiaiiHalAll AOS AJSAityiaiysIsowho 
perfsamna targcttiiupg tfwetiisnTss lnmsttafeleallhcfirKEttllhjeefiMiiicsehsltslaiiicxtbiJilaslari is 
mandattmiy ©m% ffcTpperenimb 1 nrqq iririg gaaceess to FAA §702 data. 


• (U/ j'lFOUO) ©VSClQKDQ) - NSA/C$E£ fateHlggntee ©vsresgbtat Thianiimag -tlte 
AgencysscomdtIOtojmEsepljerddMbd to the woMbrse to maintain aahhgbhddggaee 
of sensitivity to and understanding ofintsdligunun.’ lliaws, ragtdkfcraiBS, anald 
policies assweiiattad with the jaraatestfrim oftDJSS. persongriwaagy ugHtits. 

Peismanadl arc; ffeni iikiiedd wriltJthhanaTj^otictenets ofttte four ©smelt® 
documents: Esmutivc CDictim! E3333, assaaanodddd ,nOppartraant of Defense 
Regufatuami 524K®..li-Hi JElieeo1»eeTFppMetBmarialuhiiT®898505 SpdMSNSASfi S S 
Policy 1-223. OWSTIOOO is web-tatuti ci»idinnldddcskkooAdat^ig cc bfadek tfcfb r 
profidemnogy. 74 

• (U/f FOUQ $ OVSC11100 - Ovmiim' of Signals Imelligaitae Autihaiiticss —trite 

W)P)-p.L. SIGIM1T uiurclilTioofficscpprekldcaiahninidiiitttffimn to various legal authorities 


not verify the indfoMutllS fAA ^feltflinllg 1 lims. | ~ 

J (U fFOOOH) E.O. 12335., United Stales Intelligence Activities; DoD Regulation 5240. MS. Procedures Qmwmiiifg 
the Activities ofUtbiE) Intelligence Components That A/feel USS. Permm:. DTM-0MJ&2 DoD Gmiktkmae jjmr 
Reporting 0iottamalMk'Ihtidll^gmm’AhtiviiieesiMukS!bggi0annt or Highly Semitive Mailers. 
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governing IN^aBEraaitwiias. Upon ctnmgiteieanp, i^KexMiBtls^xNMdbteiMifie to 
identify aggiliiaJdttc ssm^lhaneeaathhatiaesaM to flgk liefest:! .ddfifia cludibifeas i c 
provisions oftltae authorities, and itfentif$y sattuatnms lrefluriiiigg iaHtitttonalil 
authority.. OVSCILOO is web- based and includes yoro^W^gcctbcfekfcfcr 
profidanay. All paRtanreil in the U.S.SSEINTIS^tgtKrtiLftSSS^'wbi'hgiipiuleder 
NSA saiEIiro’aBthhatjtywtthlaauBsess to raw SBEIIWrat»ff9ip|ii«bd to complete 

ovscim 

• (U/fj^ SES h OVSQBSBBQ Comp/liaiweand MinmimitmnProcedmrm-- 

an advamoaii SMOIM'iiiiJfldi^gQneeoBeiai^^tooKiffisvferhliidKpi^ilraiTpofiolhsics, 
procedures, and inarms jitoHiitie s with hi nnria iieitm suahdhfe o teJ&|jgateisn s ofttte 
USSS to protect UUSS. gramon atnsfl foreign pa rtner ffliivia^riiggbts.GysSClSSSfflG its 
jWelMiiH^dc ifflMiioldddcg^ppqi^nacpcy exarnd j 

| fei'setflHbel Who do not pass tin? treat afiten lL: J l atttamgpts immstt 

complete remsddiaiitmiaM%^ All anlplsjQsts in the USSS wwri&iqg iuidutor DIRNSA 
SIGIMT aauHnri.% wriUiaacesss to raw SMUNT arc rapqutebd lo complete 
OVSC aw annually.. 6(fc()f&)-P.L 86-36 

• (U//F6TOi OWD12IB3FBSA^A)mKliTient$its Act.(FAA))"bdS8on 702, eifljfcns 
the legdl policies aanUtiiaggtitiggaadd mimlriiiaititirlprocedbnffiss FAA m^fetdates. , 

The (osuiraei iswebbliaaedd aantiinntjgdkxs a MMpetency exam f I jp 

| | Persoffinuii wlta do not pass thefeat after ! I 

~adfempl[s~must annrpjfetec mtnediail tmahihgg. All analysts wHio nspritreaaceess to 
FAA §702 dtatta must ttdtetHiiscoomseuaiuElhHy. 


(U/ /FQOO)) Oifcirarausees aarecaWso reepniedd Wfoeeiari^ystScicateaece&iSIAaA'gQtigKg i ng 
tools. The featffinrr of these ranBcreqqi uitr d d f<6® taMl h®SAimlgiyste'lw!ipepfcifo6'miitprgegng 
functions, while ttiirl ksti a siraaddtaOjry only for tHnsRSE aaratijy fit s ttagecitiigg iiinfeter 
FAA §702. 


• (U// MMUOj CRSK1300, Foundattranns of Smart Targeting, a weWmsdd camrBse 
that cmenssttaggctmgg ppdidyy pproesatse suHtdanrapCpt s^mWlfcb 1 as assistance, 
targeting tools, tesaianhi], andccAMcatjon. 

• (U//i lPDUO fr CRSKJ 3®) I J,, Houmihttfams of Smart Targeting:: Researda, avaSMife 
in wefo-tbusdl ifeinmutbhggninhiigg Jdanaary 2015, the course fimu.ses amedtatnaetfl s 
of the tto^intgppcweessreqqiiiiiriggriEsaeaitohthdiEereamh'clirpretessurelitddtliiectbiO 1 s 
and datldtoBKSSuusddritrasEsoBtch. 

• (U/! FOUQj) CTBSK13(E . F®uuiTdiatti:oirs of Smart TiageCtiigi: Targeting, aswdb-- 
based (snunsalthat inndikildss (xdfctilmn seraiiM-e^CKwididiaiatiwis, the target* * 
workflow process, creating TRs,,tfmilhg aaidi assessing ©dltotimirceaUks,aadd 
documenting ssumsss. 

• (UZ /FCKJO) CRSKI13SB, FsuniBtiaUons of&matt Targeting;; Targeting 
Maintteamroa;, aaweibbhaedd ccxMsedhltMcijiu^se£)®TieBed®lHgigamplpi]iiance 
problems, managing ttnaffibc. audl rnaximriiatTg! the inteiiigetniK utdhe ofttsiked 
selectors. 
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• (U/ /fQUQ>) CRSKtEOM.,FB&A $aatian7TO2 ffteaaitcdl AfflpliaaitOBS, aawafefe- 
based (smiiisfficreqapmii«dd fGrr rill MSAaanfe^yst s\dd*ocooddut ttaaggorigguinridcr 
FAA §702. It is scenario -based amil aalitteesees aronpHaaiti t TTOts ,tiagg£itigg 
maintenamte, andiinnilfeint napatlhgt. 


(U /FOUOfr AdjjmnUrisdubo r traihiihgg In addition to the dsrovscoxiiuKessjnidission 

peraomdl who grant final] approval ofFAA §702 TRsmsufflt takeactBainsK on the 

approval grrafflsss,bbeapppr 0 eddbpyftfeei F/K Aj& 7§)®0 2nras»3ioteddati;aB3ffei haridmds-on 

training by personnel witlta £aljj.iditsatioii eocp^riocee. anold teajjqpm^ti 1% S2 Mission 

and Qpnmplia nce Sta ff. Upon approval, elements iimSID wifflupgpaattcthhdiid&iddailcd’s 

MBl to &%w indication gfPtRs... 8<6-& 

• (U//FOOOj|i CRSKJ1305 - FAA Sabtiimi 7Q2 Targeting Adjudication - a cowurac 
that expUams N SA rgs auroasdcfor validating selectors and faagjmtess 
explanation]* in |) | TR§;;'determining whether submitted TRs slbsonMitec 
approved, and fblioimHifpaattajiriHS ailteiaaTRRikafod^HiiprpKedctiitdaMeilc^. 


(U) AssssBssrceiqiJiaieHftdBts for tedhniicahl persamrreil to FAA §M2 reparestbriiess 

(U/ /MEMEI) Tffidhruihgyy AHraatturaate perssannd! I wtiu) diimrttlHy support! repo&kenite* and 
systems dhataeonianYamv SIGINT data or acttkiitiiES tjkstt utilize uaawSEIMrnrustst 
complete; OVSCltMKD, OVSCJICM), and OVSCJMffi ttnaihihg amrwtiilly. OVSC 1806 iis 
the sameffiaursc as OVSCIMffl (seeafaMs)) ftmc biastanttalaMtiitiiontil lisseotDoritiisysyetBni 
compliance certificritaam patam. Technical personnel who support FISA sysatoms 
and wftwosa; i'BS$piraitii>iiWies nitn^\i riahldddidktfctcaeees s to FISA (jtoaaareeaMoo necquredi to 
attend a briefing adm inistered by OGC and TV. Upon completion of the flankting*, SV 
updates |i ) recording thentett'^saaBaddaitecaathhctirratiSaggraidd thdT 

authorization for access. 


* N * 

fbH3i-PL. 


‘ II Nil ■■ 

N-NN'NN 

86-36 


(ijf) Ideindffoaiitjon ofac©s®$ vulnerability \i jt-~ 


] 


(U/BMWlf 


IS 


lie! 


j relies on a conAumattikDin of [ 


scheduled to be deratormissiemedi in 


myiyi tiyiyi Yivi vi vitiifi yivi viri vi Yirni Yiririrmnrm iyviit 


wuHj 


M part ©fits 76 


j te protest ggee§§ te data; -; | f does itfrdPfei: 

] however. It aoes mfflttvan’tfyttlfe an m$iviiju&i is current on training 

^ . -7 ft 


■ 


(G'" 4 FtHLTDD MSftSA, Y ) f I an individtsuati wiitlin aaithtniizdd affieeess to 

FI SA dtatadiism ecedd thhfttFFV&A §§TO2 dhttaHadd Ibssnihdiliialddd in the refiiulbs of a query 
Of ] data.. The iindwidudl BradreceiivddFAAATitTSImmiMgwbbiiiishhoMa'sis 


m i 1 


(U IfessNSA 't; Con^tteiWuiligiri/atiftii Servicfe. See the Obtaining the Creferitidl Mfflion for 

moreinfo™®i6bnithj(*^n&.;.;;...;;..;.;;..;.|wl 1 ._.H )-P. L. _ 

1 - * 1 (bH3)-P.L. 86-36 
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assigned to a different miissiwmso her access to the data was not in vidlattikm of the 
FAA §702 targeting and mimmizattikin (poateddiKes. Howevat, ttheaaxDcsssdid violate 
SID policy because the missnsan to which the indivistasll waasassigraed was not 
autbotized for FAA §702. 77 Investigation of the occurrence led to the discoway that 
personnel vw ihroutttfaeiTCjQiiiiin cddFAA §702 training aowiMdacmasssFAA §702 data in 
Jif they Itaa^oetSie "j credemaM. 78 To date, no incidents ilravae 


been identifi ed of individuals who have not received FAA §702 training qqwe$yigg 
andtfctebi'i(/ii§g FAA §702 data. 79 


(U/ /FOUO) When SV pemann dl dafeowmMhtifaisidtibiabibilityhey w orked with TD 
to initiate cofraattieeiMisarsures. 1 [ was updated to 

add new to FAA 5.73512 datiai insiHmtedl on or after that date. The new COIs 


traWtjate the accecss ediitrals requited for Other FAA §702 sterns* HMwdytg 



I 


gap 

egntttri llitggaietSEss based upon the aullliimly iimidenvHidMiit was dobtaitubd F 
I I d sirniiteramagaasswil llbe impleramiittuil to address access controls foFdlltlt—■ 


A review is currently aindtetway regarding acttronto take 


able 35.suquparises the laccjess,gnd.training provisions ofthe|,FAA §7652 
edures anti" the controls impfe* 


.W 


inipiemien 1 



SA to maintain'commi 


tance. 


(blPHP.lL .886386 


(U)Tabils 33. Acoe^aantiTrrraiiiiriggF^deishDEnandrfibiGltnilhrols 


$jim ouo f 


Provision 

Control 

(U) NSA wifi develop and deliver taimiirrug 
regarding tne applicable ttoearajures 

that intelligence personnel responsible for 
approving fne tiangetiirrcg of persons winder 

FAA §702, as wei as analysts wvttin sgmbbsbsb to 
the acquired foreign intelligence information,, 
understand tttaiirr responsiibiiies anreti fme 
procedures ffitoat apply to Ibis acqwiiisiifljion, 

(U//FOttfffr)')NSA has a Ifiistt of courses required 
annually tar analysts to qualify tar saEsrasttoaMteB 
acquired uuraterr FAA §702. Tbiis ihradluxte 
OVSC1203, a course speoffe to FAA §702. 
{ii//r0U0j To access MS&targefeg 
analysts must complete four courses on targeting. 
Analysts llair^igSirr!® rmiustt a]lso 

take a courrse on application offtfoe ®Uttror%. 
(U//TOUQ)) Adjudicators fwlhio grant the final 
approval ofTTfe under FAA §702)) rnnwusltsElto 
complete a course on adjudication specific to ttte 
authority. 

(U//F@tt#©t fjearsaonm^l 

who support. FISA systems must complete 
OVSC1000, 1100 and l1SB31BB5aTnruLffllliy asoraadatanaedcba 
briefing aitaihiiBtoffioil UgyOGC amd TO. 


77 (CCXRIDL TO USA, FVBY ) SID Maw^nmBrttCIiliietetiQ'421 states tkttt FESAiamasssis based on aiimKBiltmissmin 
need and does not follow individual analysts when they move to new misssms or location s unless specified in the 
document autbarahjg the assignmant. PerasaiB changing missisnsjobs, or Icsraflibnis. must provide re-justiiliicaibrmto 
t ^wjngti their mauM^mentchaiais for FISA access oraitfiasssta unminwriked, wevalualedl Qatrtwntin the new 

' ” ' " " ’jMiaiiion.s. 

% dli/F Weli Wtllthfflti i t j j credawtiitll. analysts oafflarotaaceesf AA §702 data and most otto' otfFtSA 

data. Tli j | credantiidl was origiiaJlKy eefcthbHIsbidbfdrlSA data and requites traming in NSA’s aamdard 


minimization procedures ItoFISA infonmtwm. 

TO (T& ' USlllW) 0)mA' -(FlSlGlNT missions wMed lor FISA aeemf 
FAA §702 data. . 


Jare also autl«Mii//«ii to access 
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(U) NSA Hnss established processes to ensure 
that iraw ttaeffte is accessilbte in authorized 
repositories only to those wto have had tte 
proper ttimiirnigj 


Access to FAA toreiigm 
intelligence and the albiilliitl^ tto^jilirmttaaiiafcfe^pp® 
targeting under the auttaii% respra casnttehn 
credentials and access to mission resources 
(databases, sB:aLrc3^afflwictt(iod^}. The sipw^l iss 
not granted uwrttesasttteereero^ Itetasn 

completed, (Steaktoee information reqardinq 

te&Bsss}) fg 


W-QliO) 


(Uj) QQcv^ylin^e/RE^tos^toiiMCoitext^df/IFA^ 76702} Data 
(U) Provisions of FAA §702 certifications-qqarims 

(U) Minimization ptreK^imsi^cnaiiti lime of computer selection terms to scan storage 
media asarttanihg; cfflantmuriratitownB s aaqqniiikdd pp» sunlit to FAA §)M2 and to select 
communkatofflits ffeiraaudjyiss witHicerttondilirrtittatiosis. Query sstatiimt tsanmsf^egg,, 
telephone numbers anti Megyvrowld sa ad qblplasasq s hnratdbebfcfonriedln i a aiananncr 
reasonably likely to retilmm foreign intelligence information. Collection obtained 
through NSA mipniainm Itoanacc «Eb<tocto® t tacteteiupic urtaymno t bkx^iecrii dd us bigg 
selection terms of an rdemttiilfrHiidte ILiESFR. 

(U) Compliance c®ntirodte^eeyy;ompti&aoee 

(U/ rrOUO? Queras ofitaw SIGINT databases teKssityjctt to USSJD CRlfflKH, SIGINT 
Prodmdian and Raw SIGMflTAccess, revised 12 February 2013, wHiidiireq^iiieeShitat; 

« (U/ i ' FOUQ) All usertatgpariEBattunss dfoijgiafoaviwoas^^ to review dtfl% 
those qiBKttras pnssaiteil fortthairreoview, 80 

* (U/ /F01M)1 Auditions be Ifamiilmr wMb tflrct6*j^saaddjt|jf©s of queries 
executed wittlim their ntisBatims. 

* (U/ /FOUCD) SV pEwndls: training for new aufittitars on tfHnaair resporaisiilaifittks aand 

certify tlham aasanmppita 81 

* (U/ /FOUQ j ) SV eraiiidiiKtts jpEmiutiresappciaaditsts of interactive raw SK3MH 
database (qrariess. vemff^ihg ttUortt ssitarttrss werecfdiierggiTDOitltiidaiatdidmi paper 
audit is performed and examining ttoqpar^temiHS to determine eomjiiliHmiB; 
with NSA psttigy,, 82 

* (U/ /FOUO) NSA maimErim a non-arfiitdlifeeftidc of ail sonch database (patrass ifisr 
a minimum! of one year; 


80 lU^OUOD l t NSA implemented an approach to query review thuit uses sttEtiiffbdisanipling based upon 

historical rratesrf q ueries idteaditM idcfas “reportdkHe" to detemurce the queries from each datable to be preseralcctl ['for 
auditor miew. The l I system passively logs queries* but the queries are not subjeclt to audit NSA is 

develqpiiag ;apo:cBsssto provide adUiliiHndlooffiaia^tcfoqwprfoksgaigasnshfoK'statEm. 

81 tUJ' TOUOP AlttdilorS are now required! to takeA®[ Mam- 'Wmjffk OeskihmeMutfttmTFtiai higg (OVSC3101) every 
tW0 years and must be cleaned to the security level required for the auttoniity under which the analyst parftmimatl the 
query snfcjjsntto audit. 

^ (iJW FQUQ f) The system used to test tibrei glunaesp - | does not maintain an historikuil rceocafcblof 
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• (t M? 6 UQ) Allll cflAcaTCSsbbddwafWib^by fofoiigng midtte^geocpuppn^sapdjid 

• (U/ /TQUO) An audit record of the ad lad inn towns be created and reviewed per 
NSA ipd 1 iqy b^jt fob a> ci eiismtintiip g.) Kgatan iaatro n. 

(U/ ffOUQ ii Missism auditorsaaccasssigodd to each mfeatdil. using* Itie f -. I 

tool daariifetti in the access sadism. The Idol lequitittires that missions havectiesfgitafcdd 
auditors lidiiree rt.e«|jerpffltrsonnel ean bee approved for the missimiis. Auditor 
quali&-attiK01 aslndlutfc target IkmswJkdgx: oKfpsrrtiec initttodussioramxat'aihrtiilta^'i tyv wsHth 
the type ofqueries to be BeviiswffitJ. cdiill% to mentor analysts to improve quay 
execaatiiorav aUdinmantt of all (Oieatiadidis itaqiircdd fftnthhddntaamieeebdamiid 
completMn of all required ttnaihiiqg. Queries pressoitedd to auditors are neqairndi to be 
audited \wtHihi2Miboras of receipt or on ttftnEmxx<tnrnitnrEih 1 dalunyvtidyiy. 


(U/'/FOtOO) SV developed OVSOllOl, NSA Raw Traffii'BktUiimieeMdiitiaiTFamngg, 
to prepate aaidttossffotppsMjqoqryreekiew'. The(OsuiE$eppooddesni3tBtimdron on use of 
the ©onpsaoatte qpiu^ciaiadUs^vtsteiipiiiDddmitdaiailtidaci^hpdiToliideiitpopriEiyngvidnd 
matnteiHnuK of reconate of audits (to suifftaitt SV super audits and DoMMM 
reviews)).. 

(Sl/Pli/REL TO IMA, Fy^X) The ) j system^ a legacy system wHiidh 


predates USSID CRT610 and is sdlnadluiktl to be daQSjnmiisjtmiEdd, ddcesrmaiiniauiaal&gg 
t0%meries for fivevears^ThesvstamHmsiw®twcbto€ninibfl^ledtoDrovided^s^__ 


(bl(3KP,L, m$6 query ]©g& to th 

e co orate h 

la ino and auditin s 

; stem. 

I 

(u//faufl^Qu< 





(U/7 FOO@) §702 systems provide remFdds of queries to the (camtpcrafcc H ugg ins 

and auditing system for user gimmratatiqijiuririss ofiraw S1GINT csontxmt. 83 These 
records atet ttesa are tfafoded fyi IpopOEjtuqiqeryvrewic w s by auditors and SV query 
oversigittt. These systems adfcso imaiittahi ncscjorlfc of quay reviem®. 

(U/lFOUflrj Auditors exanmecqijrai'iss to deternmime mfahtotthfeyy Ihavcaa'ubUdfdiDfrqtgn 
intelligenese piwirpsto. Auditors also evaluate (quuny/seideotiontitoimis to deterntiinne 
whettertHiqy wcereccaiiBGtautadd so as to avoid obtaining infbrroatiian on DSPs. The 
review iEsintfeaidkld to balance tfoepunsautt of foreign intelligemoe and ipratatttxmn of 
USPs” Fourth Ajmuiitimoiit rights. When a tasked FAA §702 selector iksiusdd cflsaa 
quay term amdtHKseldemoitsifolnMgtgnthdteaipcpatalqu^uyily^gB^iT^idndualiiiriiiigng 
system dhBKiwnppaiffi^itthhqqeiqiyfdbrreeiuow by an auditor IfeaEOueetllhactitmiTbliahteren 
reviewed by a releaser anidcimiicidl jdiliiaaforaap^Bart of the TOatpprtwdl ffar ttadbiig! 
during the tatgefliiig poaasss, 84 I fa tasked adbMmrisiiusddiiaaaiiqit^rjetcn'rai'alidlthc 


83 fltf/ rotJO j f One ofthe l } does ner^nd qliery-icddidsTotilHeNS A SflofjSorite IPo||g!ir(]g and !(b)(3-f-P.L. 8§--3$ 

audiidin^ systeanu. This system is scheduled to be deconMonfosianKld. _ 

84 (U//ftS&&) The query auditing and logging system obtain® curreaffi tasked seleetenss Itoi 1 3)5talV cri i i tSs ii'itsir 
foreiignrusxs against NSA S1GINT databases. 
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selector is not tSmeegn, iitiKsBdityject to review by an auditor. Queries using selection 
terms tfhitt aatccnDC tippprro<d d^teoisr suareidij bjec t to auditor resvtsw. 

Provisions ®ff FAA §702—emerre® usamp USP selection tarns 

(U/fFOUOO A3QSa:dDbcr2IDlll TFnSSC'QSJdjdc ei ppproatfed tt<h o ^usc of modiitfiteril 
mmiraikfflkin fptttffifdhrees tHsa Ippomiti qupniekis of data collected under tlkcaiuhkOTiWy cmHy 
for fbmaignihUstl%oaccppi!|npe®£S,uHsi@g USP quety ttarmssatojgect to specific HtSA 
review psuBdiuess asmJd tmtonid 1 awsresghitt. Such qjuunrtescaamol}! ^dipqrifofbraiciiksiMgrig 
FAA §702 tsdlqplvoiy/ (oanmiuiiioaitiksH s aaddlin4cnnctc»»mnnraa0doii S(.)by®ui±dibTOii 
downstream (cdBkttiion. Use oflUfSP identifiers to quay FAA §702 collection must fee 
approved in aceasodsnuEe witHi NSA ptasdiiffss. NSA iKiraqurcdd to maintain rtaaMlk 
of all USP iiltattifiicTs approved for use msdbKttcont&rmss, These cqiBrjyppooeddtBKS 
are snutt^jsnot to oversiiglht fey OoJ and ODUiWI. 

(U// FOU et ComHdfiantta USP selection teams 

(U// FQIM) NSA adopted internal procedural govanriiqg use oftH&JP identifier for 
queries of comranmuatiimss ccxHteatsti umtkrIF^A§|O02. Upstream Inttannsttctdldctibo n 
is not afppmvcti ifijrrssijctliqqadKics, DoJ and ODM itnvcavedd aoidd approved these 
procedural. The Senate aiidfHaueddmkili^iiricdlGuminiteeesv'aveiiotwiionalicd oftHmsc 
changes. Thae anetUneetsststs ofprceeddns'es for apprawdl oftHesse queries: 

• (U//F QU0)) Qnuniitcs ofinettddata, 

• (U//FOW©)) Emoignmqy officeriss of content, and 

• (U/ /FOUO) Non-emergency queries of content. 

(U/IFOUO) NSA'ss annually required course on FAA §7U32, ®^®D2003,iiioblddcs 
training on the ms ofOlfSP identifiers to query raw dataccdltettdd umitalihaiutfitoot^y. 
The NSA FAA weto ipqgeairfeo aroitaams ttkai«k!onractu<4danddcippp®is , eddpiM!ocddcu'cst'(for 
these cffuffliias. Although metadataqpmiae sancoino6 istajajact to pre-ag!p®«£dl, tfiiccqucry 
and a foreign iindMllgmegijsrififiaaMinnstist be recorded to support external oversiiglht. 
The juStiitiifcatiiOTiimHfcddaanram^ to a 

foreign target or foreign Intel ligmoE pa^passe. Content cqwfiresaimigg USP identifiers 
are sunflgjasxtt to pre-^pi3LMallbV>SS2, SV, and (SBC. SV maintain* roctamafc of all queries 
using USP identifiiBiS and imdLidbss stpJhqpeiBes in its qpiUT^imjcrtgght. 

(U) Tdhte33WsEianmnimaK2i2?estUfaqwpt^rpipimiurnsns ofMS&ss FAA ^MimmiriiniiiHaatiori 
procta&uses andtH ec oattiralks iimpjhjn®nltdd tiy/NSSA to marmflain ©onipiliaim;. 
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(U) Table 34. Query IPtaiAreoossaadoCQotnditets 


rsn ' siim E L to uqa. ro) 


Provisim 

Control 

(U) Storage media (data repositories) 
containing anpiireatl 

pursuant to FAA §702 may be queried to 
identify and sdWcssmiwjiri tor 

analysis, Query ferrms, such as telephone 
numbers and key words or phrases, vwlll be 
limited to tHmsse selection tarns reeasnafetyy 
likely to return toireigrm ifitalilripnTO 
information. 

(U) Queries of FAA §702 datlatoses rmrsB#am% be 
conducted for foreign iirt^llcpmiBB ppupmssesaadetoe 
subject to mewiew by mission awdioirs who must 
have target ifemnwltedlge expertise in the rrmissinnn aateaa 
and hme training on raw traffic database 

auditing. Therrewow evaluates whether fccpsmy/ 
was tor a waist foreign intelligence purpose.. 

tyjjjfiOUO) SV conducts periodic sipsTauiditfe of 
these queries.. 

*b}*3)l-P.L. 8«-36 

all database apesniss for at least me psarr in the 
corporate Hocnoim and ajudttmnss^^eifrifdDUQeer 

i6f)6Fite9slGiNT eentent h ::J l 


1 

(U) IbtenttffffliSB of an identifiable ILUSP nray hot 
be used as toms to query army totelffiet 
communication acquiraH tttrmigjtiwpp&teaaim 
Internet collection. ILUse of USP identifiers as 
terms to query ©EsrrpmuniicalliiCHiis must be 

(UffrpUO) All personnel [rffiraiwe annual ttBahirr® on 
uy£P query procedures which can only be performed 
fodc&Deefign intelligence purposes acpinr&tFAA §702 
telephone ©octantm 
.communications r 

approved in accordance with NNBA 

;j JJhe SV web pa®© prawides imstructions 

procedures. NISft will mrarttein reeotddsof all 
USP identifiers appiwed ftoruffleseB attention 
{§Fm§ ; 

for requesting approval of such using a 

process that DoJ and ODN1 approved. 

{U/JTOtftiSf Queries of upstream iMarmet colteeta 
using USP terms arre pnoNttfllledL 
|EiJ//P©UQ) Queries tuff nroffitoaMte are not subject to 
pre-approval, tail the query and fiamspn irrlMIpOTK 
justification must be documented. 
ffii/JTQUO) Content spenies using USP terms follow 
request and olmmn&iMm procedures amd an® 
subject to pti©-appiwall by SV and OGC. 

(Wroae) SV maintains records of all apetiss 
using USP identifiers and jiimduides these queries in 
its oversight of query rwiiew. 

(UflF«IBJ DoJ and Cnmilwil conduct 
oversight of NSA's queries iiuann® ULSJP 
identifiers. 

(U) See the Oversight ssdfam. 


(OTOtwncL To uw, retnr 


(UJ Sharing and DissemmsUmn 
(U) Sharing) 

(Ur jrOOO) As stated in ite/Axcx^ssiaddTiffflaingig.csaioiiintat^maigiipif^tid'aEeEcqiqcdre 
that sill! gsenssaimtl aaucesssigg or otherwise lamfllhig raw data asaflutiisEti pmsauaitt to 
FAA §702 must be oiinircntt on training for tlhcautiuriily. This imposes raatrottOTiBS 
even witiihi NSA on the wise of infonrnffibnn (fflltotaiimduiiddetltisiaiflhdro^ty^ 

(U) ttaimrimiixdd ccarnmmniuaationScita^iiiktcd prasuanl to FAA §}7IB2 m^tiseppcmtilddd 
to the CIA and iFMffbr tfcangatscoablhhsnklidQiiftikfifcd to NSA. Each ^pomjyhhas 
minimiizatiKni pwaBEthress hjorlilaadfflHgg tkiaiariatjUsoetfcditMkdcth t b taialwc&liHiyit dinah uhu st 
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handkoiimmaiiiiiMdmi^i|MVLUlttllcclb>by NSA in aceMdbnue: vwihitltb^^i^im'toim'.es. 
CmTently, unminiimiKaili diaaashhradd with the CIA and IRHI is limhssdl to 
communi teaidxpiH s cldc limed from dowmsteeam ordliedekm. 

(U) Disseimihrattton 

(U) TTtirte NSA iaiinimizaitmppfflO£#iheBCSti5t|d^l $o t«bi ddssnmmati o n of all mffarmMkn 
acqunnsdl imd&jt FAA §702, including iiiOT^iiLWic'ij'yimjdildWinibforariatiouoQoeiaiingiiig 
USFs atttfiiitedd by targeting man- TORs ajfpooiwi dunddc rhdi N StfS ArggjBqb qgxpatardja res. 
There are ‘sawed! rEestiicitooasooiiliiissoinatatiDn of infoimnutiran aacgwrieddunridcthtihis 
authority:. 

• (U// FCMlfQ) iBisc rete Com mind icatfrinns vridthi rtua n MCT Analysts; sadkitg to 

disseminate inf6rnmatibnnodhtiaieiidrdwsn didiaaa’tommtinkHtioHtiiaiiitlwithiii an 
MCT must asssesswtatafaaihtinriomintnintniimti o n is eltgilblk ferdiismihination 
(e.g., nmtaackkMBStstiaeniiiiiinunkialitdi^ndJ# the 

comments field of the lKqpHtiimg ttodl iinra atnnnBritlihRk^pptfftsnietentiMnatid 
external awergght. 

• (U/ /fOfeH^) Attorn ey -C Hiatt Gommiiniications Dissamhutitnii ofOlfiSP 
attonrne^etihontppmliiggddcaoimoniekiatrbiisiiratufee bsyrewktivb^ thy the NSA 
OGC. NSA nmstceaaseendeiew of contommbaioMtsbbtstwflcn pgpsraon knomm 
to be iMtto^ciramiablihdiliertieTQiit in the TUiiitfeeid SStaeesaadd an attorn^ 
repnesjnthig tHaat imtiwaliiiafcl imtlthiatmBHHcivseggag^taistidoiiroittaniaJtitiicalsoiis, 
maimitant anesanrdd of the iiiiaittttkld£i3i®®fflBy^idifft(it^oommiw:niGation8}daii[5iifi\itify 
Dot] so that appusjpritaee qrosedhtnestirayy be estaMkHncd to protea soda 
comsDurriieatoM s fiftom neaueew or use in a esihriind] ipmsctittdtao n, wfa li d e 
preseminig fftreigpn i mttfflggoneei ri ftfbnatatiio tiniditSiED oonumra j irat i o n . 

• (U/f FQtMB ) Dom*esiic Communi ieatirnns A afantesitc otrnitDMnhiaadnniffinay 
only ihecdssBemriaise&id if DIRM&A has aggravedda alekiEtratirtrottvai'aarhDifahidiat 
comitnauiiieatumi, dstoameirnitngi <jt s tslqj ikiiiltoirH t $b fate ttsi tinin o an ditd sde sa imtdwati o n. 
Such ajonmrawmaation stoqu slcioiMhainfajftiaiwati dtatthat meets one offftuiT 
critcuitEt : sognitficant f&etggn irnttity gmiec j etdohokaltdababesofiiifotnitation 
necessary/ ttomgessa^otmmiaidatoidis's vulnenaftiilty/. owdtonee of a aiinte, or 
infornmainm aHnteaimggaahteatat of serious farm to life or prop©%:. 

Comnraumteatermss aaqq LraidwJviie tfitineroawnsi iraaxtassbiablc belief' at tfinas time of 
tasking tfatEatiagectwwtaa a non-lllSSP 1 ocatetl cantsddcthhdiditttotdS Snateamnono t 
eligitofte fon'dkssttwtjkknw^eers. If a wamrilihafcteeDtatDitiaeded, NSA may 
shame dimi®6£ita<E<SMjimnm^ dotnba^tafeffeffgrcigtelligettigenateievbiiie but 

are Ikitbwcld ttooatmitinestiddcoee of a cnimtcxiptpgaijerfrertiattteiliedaira 1 law 
enfomoment authofiiiibsss ihuajtDDEddaoecvvwhb^ijilabtbl bitowdstT^gelatiiMio its. 85 
Withoutt a dteatTiort(M)«i vmtiweer, NSA is authooiiffitfl ttorKinif^tlhtFBBI if 
infonntoHikm iniaaddxma£BCi cccroimorninaridio indtatteat aharfni tagat'gfalrattaretbred 
the tririt&Eti Stafcss, The A^ni^ynniyiyilatecppi'dviBd dnibfaraoiffitaotD tthethCKSI Aidmd 


85 (U) 50 U.S.C. §§ 1806((bi and 1 &2 S,(<d) requiiire that the cornrnmuiitiicatronsbe releasedl with a stotement that UJe 
Attorney General must approve use of the information in a ariminal proceeding. USC §1 ©®©(Id’i) iisnot liimiled to 
FAA §702 domeBtbaHJmmumcoatoaBsitinpplies to all disserriiinatiBTtsto law eraforcemant. 
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FBI fiai 1 cad ltetidmi wwadniattcp Lippcjpo&e s . NSA may nattaiiitkiwgatic 
comrniDimikaiimss s^aacddwAthlthtdic CIA andffMffaBHsmtiotkiiiamiiihinatiBtatcsttict 
further use or dissamiuman of commumiictritous wHoobc ct±KlttMCteist'hi>abd®rcii 
waivoS lijyi^iiatniigg ttiidddorififira'stlfoitttibeeEfljmiiniiiiiuuitttUroins on the MPL. 

* (U) Foreign Communications «lf oar Concerning DSPs These 
commDrriieaiiBiss tmiyybbddissnittitathd, ifttte identity ofttte USPiiscttdhtcdi 
and a guntoiict4cnmutih«mtfcd so that the infomrcatiram cannot reaasonbbjly be 
connected with an idtemiffiiable USP. Tins ip-neesss iisi-ef&iactd to as "in®Hihg'.'” 
Otherwise, dissemination of intelligence toa&Kti on suchcaortmirakoaskiusnmpy 
only Hnemiaite to redpibmtte rafliiuiihgt tttheiillatitt^y of the USP to perform their 
official duties and an% if at Beast one of eight additional requirermams its mutt: 

0 (U) The USP consented to dissenwnaiiMin or the iimffonrmfttimi i KSi^tnlrililiclyy r 
availaWe, 

0 (U) The USP identity is necessary to understand the f&tajgn 
intelligence imfleaimutinm or assess its mtpOTunisx!. 

0 (U) Tie uromnoraijnotrtiori or infotmadfism imtiicafess ttttat tie USP may be 
a foreign power, an agaat of a fiwraa©n powai; residing outtsMas the 
United States antiHaddim@gaMxrfffidh!pp®mhonimthb(ggeewinfiBKtiit or 
military forces of a tfbmdigin grower £ a.'«tqnpontiit)io n or other entity <®wmati 
or controlled dintEai% or iimdm£a% by a foreign grower, or acting in 
collaboratironi miidlii toni kuttiggoocc or security serwiiaE of a fote%« 
power anfltlfee USP has or has Brad aaxeess to classified lmatiicandl saamii$y 
informatitam or materiiali, 

O (U) Tie USP may lettis target of intelligmae aottorituss of a flmreign 
power, 

O (U) The USP is engaged in unauthorized dfedbcsstrec of clasaiffudi 
national ssaruilijy i nffomaMawin ((roily if the onigunaihg' c^unuyyhhas 
verified that tieiiiftoTnMtiron hbaibeoipipi]aipfyly;]iaiai,§idibd), 

0 (U)Tle USP communication! matsantttoiiedd blyyaa:ooutrolatadumalndhdie 
communikariiini nra^yreMaie to the ft'sncb|gn i ihttttiilggeuecp puppase oftthe 
surveillance, 

0 (U) Tie USP may fee engaging in international torwrristascmtiiBes, or 

0 (U) Tleaeisseffiiddecieetlth&ttlfec USP is engaging in a criminal activity. 

* (U) Foreign Communication of or Concerning a Jflam-USP may be 

dissmniinatitd in accordance wthimdwildwsregidatiuh.'stisandTfiojtielHsies, 
provided that the connmniuihieaittrn,s taca;tilggjhdef(foriuit(t^titniHijddciFPA^'^7B.2. 

* (U) Collaboratidm with Foreign Governments Consistent: wMn ttfnviMtibtDitpy 
accorded NSA%E.O. 12333, the Agency mnantiiari h stKy piptokigididiaiaon 
relationdhiigts miittiiceettiMifd'miiggigavErQmentstts. Information dhriwattl faun 
FAA §702 collection that has lemiea^lhateddf(fiDifdtBiggiiintBlhgKjCBcandiid 
minimized for USP ihfferanatitnii may be dissemsmmtatl to these foreign 
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governmontss. 86 Disseminatkm of infotmattem of or concerning aaULSJPsmast 
comply vwliMithkrerceHtiddtiQS,sd ekfftijddeih ifefmgdglioCTmmuHiiratfoof or 
Concerning USPs above, as well as with those dfesciffibddfor MCTs above. 
NSA is permitted to disseminate Lmmii]iiirindzddc(PDmmuo3tfiath.Bito foreign 
partners to obtain ttaxHrrad<aii 1 oar] imgiu n ti ca stssiatturcto determine ttiieimstnmnigg 
or signufcamne of the informaitea. 


(b)(3)-P.L 8B&3B5 


(U) Shading FAA§7®2 with authorized NSA personmell 

(U/ fFOUO )) Atedj/yBtsauihtaziaicio access FAA §702 commuimkatt bares aacetrained to 
ensure that indfisrodbalfc ymilthwhomi th ey wish to discuss sutriharamraanhiiatiti o b siitetve 
appropnatte orcddaritiM.s l [ peimilBs review of am individual's training and 

clearances.. The training also addresses bE&A policy vbitrtch states that e-mailing 
umninimiiaed and unpufolisflnsd dfetteto anyone,, even otttde®f®A]lteEeaMint;l,vre3(alates 
compiawme coantohfssaohlTaasfSedtia'QLaiiditnig. 

(bK 3 H».L. 8 EMffi 

(U) IRwtwfeikjm adwraminimized communications toO^aanb (Fffll 

(U// FOUO )) As described in the Targetiimg ssettaxnnNSA must approve selectors 
nominated by these agendies liaasddupon compliia tnRE wiinNSA taraetiner procedur es. 
selectors., [InteunfctL’otDimmuhiffliai Mionb 

p* -i "‘ ™ are routed! to the requesting agency | | based 

upon inforffla^W ifi rite tR. M c policy §tftlfe-th§ti81lMyS&-ShWHd--ft9r%lfflfe—' 
iim|uinteizead fflddllulteWltkatcd communionrarBS rceomddpipreimntntD this aaUtectawm 
witto the CIA and FBI for selectee* ttekteddowbdteMldf those a^gmwass ;oocbllAt&boardtion 
siNfr piffflittdd wh@» from the CIA §f FI I a @§§§§ the 

uuminirrnnikBd CTOnmrDUMraeti trailsfrom their own agencies.’ FAA §702 data repositoriks. 

The requited annwtill FAA §702 course, OVSCJ203, provides Iteming on these 
restrictunioES vvHurhhaaeedde^goddo assure aumttmdifoHiyyof disseanrriianattiisin if recall or 
purge becomes necessary. 


(U) Genenall dissemiinatiion requirements 

(U/ /FOUO ) Limits on use of reported FAA §702 communicatf kbits Analyst 
training ((EWSSU 100)5 jnist stats: tthat ,l use or disclosure of informafcm dteri^eddfifimn 
FAA §702 commmkartiHTBs in any criminal proceeding, iinimggantiniptpis^dgpgtr or 
any other legal or admumhttrattwe ppoeeeddiggis prohibited \wtH(mtitt itihadivbntttce 
authorizal&Din odfthe Attorney General afftbe United States.” To prevent such use, 
NSA internal ip^ccaxodalcicssioqafwitrethat disseminadranis orfFFAA §702 derived 
information imiJiddethe “Intelligence Hiuppsee sCBhly 'b jrayaatltAtap rphaMb itseuof the 
informalMBiii wittoKautapppvBlal.This is included in the FAA §702 training. 


86 (U/ ffkEuflQ ) Collated! traffic that has been evaluated to determine whether it contains feweffign intelligence and has 
been subject to mimiinxiizathjnto protect USP ideratifissis refennad to as evdtaabdinnniiiiaikKhtrfflflfeorEMT. 

87 (U) Disseiminaticm for techmcd or linguistic assisiturmcis subject to speoiffik meatrottirasslimiling the use oftfte 
infcmnultrotiby the forcigm govenmmantto transhtfhm or analysis ofttke conuraMnaaiaos^ allowing disseBMdiion 
only to the individuals performing the analysis or tramsttafoi} resttikltiigg the foreign govemnmBttt from making a 
pennramamrecord of the information! and requiring dte&tnstfbn or return to NSA ofUlie infonmuiBmdissemnimKtHtl. 
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(U//FOUOJ Reporting dbminnButiSition Consistent with the purge renpraamsitte inn 
the miniamzatiiini ppueeddru^sNSA is required to account for and must be able to trace 
its dissenmnaiioiB fclaaeddon FAA §702 communiiottiniB. The annual Etaahmog 
addresses the dronuinBrtaathmthat analysts must compltefte to fulfill this mqpinEnsetrt: 

• -4 SMN R The coUection aauhkw)ithy( sfopafif i F A A §702 


piece of traffic used imttempqmrtand 

• (U) A sourrsx voiitfiiiattam ssatataumhti atoaraaneii^ngn adadffitirfifirr each piece 

of traffic and confirming that the source was not ineligible for retention arr 
subject to purge.. A new reporting ttodd,tifksbi®G±LdHde<iln 2013, performs tflnc 
source verifikattirein arntBarnattcdlfy. SuccessM oix5i]pjdtitionofifltlH^)p®ocesavith 
no flags amiffiimstltfaeitiffifi<may be used as a source for reporting. 

(StfSf/iREL TO USA, FVEY) An NS A repotftiing policy document. Somriitpg 
Reqmmrmmtand VeiriffiimtionGuidmme, ISS-OM-1©, revised 88Vlay 2012, prawMes 
reporting and dissemination guidance. The policy requires that individtafe mtoakiHg 
reports verify that the reports do not contain infotmrtHUixm that should Ite'ceHneen 
purged from navwSEUWTdlafefesaees. This must be perforated vwitii)ihn24 hours of the 
report rallaseeusing the Me&terlRuggellist. SIGENTT rqpsoMeisaiaralso required to 
include traffic source identoffiens for all reports and enter source verification 
statements in the napjxrtinggtool to confirm that this review has boon ppeft'anudd. 

(Simr/MIILTO USA, FVEY) The primary analyst r^tiwtm pftaoMaiaisd dn 2013 
performed aadMtnsBtddvQrdrafkktiDCif' so litres against NSA’i j | at the time of 

repoefearelcase, 1-fffnone of the soutince records for the report inaathhdcfe-cKHudislki the 
purge system,, the report; wxaMdbe released. If a match to the iitterttffierfor a purged 
record was found, the release would be stopped and the indiwiduuil re&baakigg ltiiceprport 
would be notified. The policy iTEjtpieesthat a manual source variffikattioii chhefckbbe 
performed for reports released tiirmigih tnaaaaavitithduauEtutDatKaledisrnar^rifiiMiKation. 
In 2014, a new analyst reporting tool was implonterttail tUaatalso includes automated 
source veriifioriinn((s^the Purge section)). 

(U) Diss®imh®aWiggcocmntiniinHtBCtmnan\iolvtrlgirf^CraieTs 

(U// TOUO) He FAA §702 aimliM training course, OVSCO03, atidresssass ppcrorabdrcees 
that analysts, must ppefflem for upstream 1 hr terioe tc didbt <3k) nootmtahjirl^ OTCffis 
comply \wdtiitUteMBikinuzticiDrpip 0 sxduJQresThe training iiMenitfilfiesthe requirements 
for disseminating sin 2 ^deddecceda’oammuimritiH 8 ia\'itlithiMtMRsTThe course also 
explains requiremuaitte for documenting ttoeanffli^yiasthat supports (Hie tided skint hat 
communiottiiniB artedigg^efdbrqBptintgigAn NSA reporting policy dakjuuraBtit, 
Soume Reasmi Bitruesfar Reptcviihpgjfrom FAA 702 MuMjpIle Comtmmijzatixms 
Tramsmriion, ISS-185-11, .ri^ariresi ldttttmapipdiiaicbe documented imN > $SV^ra]®qaon(ijng 
tools. SV performs ©veasiiglht of the dlmixmetaationsupporting use of certain MCTs 
for reportinng {teethe Oversight ssedtinix). 
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(U) Disseminating attorney-diartt cormmmicaatanss 

(U/flFOUOJ In OVSC12BB5, aanail^KsaiaitrfiiiamfedncihdheqrBquiTCmtiethat NSA OGC 
personnel qrcea^ppowizeddSsserhi atitiKHn ;ofi nformatter i in'dtlrriiggUHB0tMttmcne-y lichen t 
privileged aronmniraiiiHeatiDas. 

(U/ /rOUOj ? Disseminating dumnsstf is communicattcmss Dissemimattjiwn of domestic 
commaaimikatlitQns is limited to those ommnmiinQatioHsfcfoivMilcDIMRKSAahapppprcid/ed 
a destradtinn vwaawe iikkiauranii tig g h the krl qi i|iibi(i t|br retention!. 88 Such 
communmixnttiburss must contanm lirfforaatioonthat meets at least one of five cniiteraa: 
signifcamnt ti&Dee^iiTitmt^igma^QeabQhuulcdhtdlaSabasdbiirfatonatiGrifornfatifmntaooeaiacvssary 
to assess uammmMatitiDasvivlun]^^ a crime, or infonnaattikin 

concerning aatHncehtof serious harm to life or property,. (Desttu&tiinn waaveessaace 
discussed iirithkteGB(verig^hland Purge sectiam®,)) Tnairriingon retemtliKm and use of 
domestic ccmramauhiantiDJias included in OVSC12SHB. 


(Uf/FOtfO) Disseminating foreign communriuattixms affocrrcomeenirig^JSB^s 

(U//F OU O) ] OVSCJ203 addresses the reqpiiramBittto exclude iiiffiarrmtitinnfiwi 
reportimg t haat\TO<uidcla lldk* w acntkdedo determine aaUIEaPfe identity wiHesss the identity 
qualifies for disseminatten luddertltheetenmof the FAA §702 minimizstiaan 
procedure®. NSA’s Inforansrimn ^hanig^SMeeseGroup) (ISS) rmviswsemqetpdimK) 
this “masking" requirement. ISS handles inqtpeKsfor release ofUSP iifatities. 


(U) Disseminating fimreiign cornmnumbatimra orffcoTcotweeniriggasnoanUfflP 

Foreign OOTnimunuatitiorisof non-USPs that contain ffruerggni ntoth^ igmicareieligiy&For 
dissemikiattkm ssuMpjectto other applicable laws and policies. 


(U) Dissemination toffameacgn gawe n nnai t fes Inforaiattiism otitxtiiioddiudirfeFAA §702 
may be disseminated to foreigm jgxwcnmoBtSsin three ways (addressed in 
OVSCI203): 


izimxsMZte&mmtxmi 


ia»t 



8; (U/W DUe t- A destruction waiver is not reqsminBatl for disserniinaironof donmesitik: ccwramuiiiaaikiBsto notify the FBI 
of the taigsfs presenaaE in the United States or to notify the FBI or CIA for colleoikirhavoidansepuipDiSESB. 
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(O. 


| (6K3H* L 86-36 


^-Smcfe disseimmffliinii mutStbheppdtfnneifcd in accoidaniK TOiiihsfpccafel 


handling procedioarss annd nsiiprassthheapippimlal of SV and €XGC,whta )0 lruaiitiani 
records audreqDxDttlthiscactitj'ty to DoJ aanll(5HNi[. 



- ffilRELTOUSA, rvunO) DtosemrinaUani affontlteatomn £ajtpure*fci wHum pKs^t- 
tasking technical checks are matt functioning properly In 2013, JffS&iddatifiiadd 
and reported am incident in wh ich amsemmttddifatjrtw ircomcsfaii'icmcKiiprhntete 

pretax e l Aw' 

miniraiiiairiHni iptcg&diu&ss a^qromidihiWo«oibbcr2Q{[33reqcji[iaddapppliaddon of 
pjRCcpqtyrcs Wt N§A (Mopped in uspusp to th§ mate, These pwWurcs 
included addiriomll yeniffeatlit m of target l ocat Mtai littffeme FAA ernmimintmtom s 
acquired cdirihg cO]^£otiol , d M "4dietf _ 


post-tta&ihjg tbitHnitcdi Icbbdck arematio t 


functiomm® as ifamtEandfeasti mie^us^^dTota^^iiiti^^iaA^idiesaiTijitiiattiiion. These fprajediuees 
ware tltessUljjcct of several aronmmamidaaDoasaiaromSlSJisaseilcllsaKilnrahitisi^EaiRT'is, 
and are documented on®f£&’$ FAA fTIIEwvbtppgg.e. 


(bK3H».JL.a0s~ 


(U//FQUO? Table ^siunnmitizesthhcstiMiiggaaidlddlsssmiiiatadKDrpipErorsidttais ofttlie 
FAA mngjHtiiniig arnil minimizatiom praoailimss miidtHeamntoshlsiiiBpiymeffitafitdl^^y 
NSA to mamtaihm comnudirmua;. 


(U) Table 35. Sharing and DNssemination Provisions and Controls 


Provision 

Contrail 

(U) fftJ&A jypEgFgggsto ensure 

that raw tefffftc is accessible in authorized 
repositories only to those wto have had fuss 
proper ttrairnirm®. 

(U) Annual FAA §702 training auMresses analyst 
responsibility for ensuring that individuals with 
whom ttteywif&ti todiamaffiFfMA §702 
communicallioTO barrettterresBSS&jyycraeldeti&tels 
and UiaiinifrT®. 

(U) INISft ma^ypawttte to the CIA and FBII 
unminimized communications acquired 
pursuant ttoFAv& §702. These communications 
will te based upon targets that each agency 

i entities tfcN&fo. 

fa) . 

T§#Wr SV adjudicates TRs ffiram CIA and FHL If 
approved* ttesdqencies will reexsev^e LiiniirnnrniwTnni^ssd 

communicai tcainsi- t - 

I _Jtor requested! targets \xnHm^ 

areaweaawtteWeiti bv NSA, SID Dersonnellwilll 
dual-routel |to provide 

t w MW 

(b)(3H>JL. 856-3 


j J Internet tMiririiriumtMtODif^ ttrtte 

1 requesting agency. 

(U) Mfniimiizata procedures reafliiiree INJS&lte 
able to ptuin^e aaoorrrriTiJjrr^ tiMtimefct 

specific rieapimiraTtfe. 

(U) To accmuimti fforasidlitaaeed&seB^ 
on 702 communiicatas andtoGKmn^ with 

purge ireqwiiirements t analysts 
certain information for the data sources in each 
report, iirmodiiialihn® tthBSos^tilffifo^itEXDin undfoiwhtchh ofefe 
was collected and a statement \mrtjyrng ttettessaKth 
piece of traffic used was cornlunrmedi as eligible for 
retention. This is adtetessedi in annual aamadfesat 
training and NKEBAnefl^ flaortiigy. 

<pU//rOUO ) A n@m n^asnttnr® todJ„ ffn^;tirrttocdtuDSEb in 
2013, performs the source wriiltalliiQn 
automatically. Successful completion of this 
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process mflfa vm flags (amrrffnMnaG the tafflfic is not 
subject to pwirag© and irra^ toesusassti as a ssuro^ffor 
reporting. 

(U) A diissemipatfiGDTn has©d on communiirai™$ 
of or caiTKEmriniT^ a USP that are eligible ffer 
retention may be made, if the identity of the 

USP isdeleted and a generic: tterm or symbol 
is substituted so that Ute inrffomeation cannot 
reasonably be connected with 

USP. Otherwise,, of intelligence 

based m communications of or concerning a 
USP nra^oiriy be made to a recipient ireq^iximig 
the jdefiK% of such person ftorte performance 
of official duties and <mn% iff at least mm of 
eight oriifetria is met. 

(U) This irecpihoOTmitt i® ©Drnsi&tenitt wiitth NSA 
reporting policy for all reporting tased on 
communication® of USPs. 

(U) JfeOft analysts seeking to use adtaistte 
communicate within an MCT for rrefpmfli^ 
must dkno™®irtt tttatsppecfifeefci aarc^ssshhas 
been performed. 

FAA ptESttBainiifT® irmdkdte the 
requirements for reporting based uipsrin dtaeSte 
communicates within an MCT amdttlnffi 
documentate required. SV rowmsthis 
documeffiWm for cetrte MCTs. (See Oversight - 
SID Oversight aBiratiG2OTT|Cf±ttaTOSs.)) 

(U) All pm spaaed diE®gammhn^i3srirK of information 
constituting USP attorney -client privileged 
communicates must te n©^©M®3t} to^ Wire WJSft 
OGC tetae dj®®nihnsSlfiErri. 

(U) Monitoring of attorney-odiffinfti 
communicattais between a person kmmm to 
be under ammrtal indiicttm©^ in the tlMited 

States arid! an attorney representing that 
individual in the rtrmsttter irndteritnmasilst 
cease ©rmcstths relationship has been 
identified- Acquired communications must toe 
logged an^ttfelWfeDOFrail S§miri% Division of 
the DoJ notified so that ai^picqqotEdte 
procedures rTi^yttees^ititefeiteeici to protect 
such onminications ffirom nesA/eawor use in 
criminal prosecutions, Mdlrilte preserving foreign 
intelligence information contained ttareiim.. 

(U) Annual FAA §702 ttoairrning addresses 
procedures analysts imuistt ^fferrm to disseminate 
this date.. (QX5C notifies dFsudto 

communicates and a^®®ssmi$$tei m 

disseminate.. 

(IlWFGUO) Minimization procedures nsapirK 
that dotmeslfiicaDQiTr^^ fcte promptly 

destroyed upon rasppifcte, unless DMWUSA 
approves the communicate for a desttadfim 
waiver. Domestic communications for which a 
destruction waiver is apprwed may toe 
disseminated.. If a waiwetr ftefcton cnlM^rin^Gd, 
NSA mwy/ stare domestic cmrimnjaTiG^fecii^ 
believed to contain evidence of a mme with 
appropriate federal law 

authorities in accordance with appllralblle laws 
and repiiMbirns, Without aadtettuottcam vmimv,, 
NSA isaiifftated ttorraft% ttheeFEBlf if 
information in a domestic 
indicates tftetaattapt ito^teBSEbtltiteeU^rttad 
States and! may provide imfbMtalism to both 
the OiA ^rotl FFBBiftorcoititetiban 
purposes. 

(U) Annual FAA §702 taining addresses this 
requirement 
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IcjI Uajm, WEtfLTJ No A lfc& fpsSlTinittGELl ttD 

(Gthfd i\LLL f u iLii,(!jA h i vi—Y| niiGBmpjsfflojyy^qqiiii^nsmcnat 

dissemmiwTisatGDn of EMT mofliheffid pmsaifisitttdo 

FAA §702, caltfmrtltdan^s©0iiatiMEddpp®ddcttm[imlst 
be apprnnweob by the SKSIOTT cahaaaatoraadefeaeemlrd 
of the disseminata prroiateti to SV. 

dissemiirn^ee^ni&teddnmim n 

to foreirap paters. 

(U) NSA may (dssBTnrrraafce r&svudd&aata a 
foreign govemriMirtif(k)[tdebhtelal oriinguisfe 
assistance©. 

(U) Alltel FAA §702tteanin^ 
requireiRtettte&fesafoh^ 
appirwasdi by OTaarctj OGC,, wto 
restriefiwanffi csmntj^^oH$s^©rnma6dDn,ktee|S|^ 
required record^ and n^qiHytfrtoQ^Jaaiic^ ODINL 

■(S//MF) If NSA sffl^tetdjajaeenifdi^^ 
acquires!! i^uisEuatitdcF AAA §702 wtfmm tere is 
uncetffeeinitW ataitttttee Ittetom arfftttettowfet of 
the aenpiffittam teamiss®! (poslitadtintg 

chectecteaciftfeeld In NSA’s FAA §7(JS2 
targetdiim^ prooedtur^wee^^ 
properly,, hMSAvwfl If cfMwiri teteal $lr<|nredectees 
forfitetoniiTimgg wiltmthBsissabh lnfoinnnartGB(ih 
be used!.. 

for use of data sajrtuhBefcj wten nag^tefetinop 
f |checlks are mrrtffxrnDtte^ aasirtit^eoldeld 

were (marmmjmid^^ 

dCKMwrtetl on the fF^gTO^ffifetppgige. 


(Ml Purge 


—\uuuuj; 

(bin)) 

(b)X^ff > U.S863Q6 


(U) Badfegrauriaid 

(3IVRIE1L JO USA. TVCY) The Post-Targettiiiittg sseciaanddoauraeretst htiieerpqrammesitfor 
destniidiMin of commiumkattroits and the processes that may identify arcdtanggein the 


rocessci| 


i htiilmideaiaad^bf stevi ew of 
and receipt of infonrnamm ffnjmoDhkrer 


HM ) 1 ^ 

(bp^.L 88-4® 
(b)XPS>ySHD use 3 Q 24 §) 


target’s location carUSP status. These p 
onihiupiatiiaitionsj | 

agaandes. If the circumHtance& meswulitt in 

data will be identifitail and purged. 89 The period of the unautlwriiasll ooWeetoonis 
included in an incident repeat decMimarttatl by SV and is used by the purge 
adjudirartnr, who initiates the purge process.. 


(U/ /FOUO) Comtpllarose controls-ppcg^je of FAA §702 commiumiixateosss 90 

Manuail and automated! ooasitiTt®dii ss iKgupptbitdi tbetipgirgB'fxrcsiesSID's Mission S&iflprort- 
Systems and Data Compfanone Group, within the Directorate for Analysis and 
Produdlikm, dstevfelppdda p ipgrgeiinforrM)tjic.)web page to guide analysts.. This page 
includes instniefous to purge comiinaun icat inns cotiileuid d i i uhdeF A A §702 authority. 
The directiiMK call for analysts to contact SV, iftthey believe that purge offfAA §702 
data is require^, tbesassanaQuHya llihasa^saqiquihfpig upgogaiso require iociiafemt 
reports. 


(S//S1I REL TO USA. FVEffl) The purge web page describes two types of purges:: 1) 
incident or psHaimBtric pprggeswtoMbtemaroeeESHaryvhen the reason for the purge 
affects all collector for a target or selector oowraaqseiiiddof time (SID’s Missiona 
Suppoirt-System* and Data Compliance Group perfffifliim* t baseband 2) purge upon 


9<P, 


89 (U) “Purge" nefeis to the deletion tf smmmuriinUtiHirs from systems that were aKopiirf ujsaiitfiarih of unauthorized 
collection or otherwise am masti autilioiiiMil for retention pumuaittto the minimization procedures. 

From the time of collection. [ 

- -| fWicjfoiiifing d#i§fipti§fl feguseg @n IB 

¥//si//Norfin!s T 



m 
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recognifisam or analyst-dhtkan jpirgtes. A paramedic giu^eiKappilidi. ftfocKamplsieto 
remove commimiio!tiffiirt.s oirilteirtddaft&eBaa^'gleis determined! to be in the ttHriiCadd 
States. Purge upon nsmgpiitamfrfDfAA §702 is, for example, required when: I)) 

NS A identifies aidijOTetteddoinst$ti<cooiriTnnii!riala[tii©iwit!ithi an cMCT, requiring tfe 
entire MCT to be purged or 2) a legally aajqpiioddftfraiggitaromuniradafiobetaeteffieai a 
foreign target and a USP or a commurricatiinii imwHicdtittheaii^jsatis a USP found to 
have no foreign iintdl igerree vahlue. 

(U/ /FQUO) ? NS A has implemented aunifidimi coorp }j fencest atHiaidrdb tftpnjgugesrhidti ch 
states that, consistent witHiN®A's FAA §702 minimizadaaii jpraadiireesand absent a 
destruction waiver, some or all communicadrams dhttaaucqiireail undterttte authority 
must be purged if any ofdteffdlhwiim® criteiha are satisfied: 


• (U) The tteigetaklppearoiis confirmed mrbsdlte'cddto be a USP, regardless of 
location ((puggeall communicafianisll, 

• (U) The tto^t^lppessDaMasoafifiinodcbidiidiBlicdetb be in the United States 
at the ttinteof collection (iixMniml)(iiptgga:odUetitiDmccpqtudediidanigi^rp30iio(ff 
U.S. travel), 

• (U) A person was incorrectly ttugjptcddf pprggall collection)), 

• (U) The tteikdiseyetnoigjknown or suspected to be used by a USP (purge all 
communiofisaiiB from known date of use by the USP), 91 

• (U) The seyetnDiwaajkhouwro lonifHpqaeedetb be accessed from withjn 

the United Stetes((puggetBammtun(tQafek>Bsfrom date of access), 

• (U) The tte&fflfiadbslterrwtes ttekottl Ihdfnre Ifesrqg apppiwddfifait aKkikikig, 
remained ttekkddfdbany reason after collection was no longer authorized, or 
was tasked under the wrong autHrortJy (^prggeal 1 collection), 

• (U) An incorrect adtefttor was tta&lkBil ((puigge all collection), 

• (U) The communicattiiMi iKonie iin wHiidh ttttesxaidtsrand all intended nsdjptents 
were in the United States attttfte rftmeof acquisition of the oimnmimoaaitdKPin 
(purge affected atnmnruriioaiidiciB k). o or 

• (Ufr ffOUQ )- Hlhe mximnunicaaitOTn odthradasq uplaffiifieas as'tdhdrostostic 
communication" assdtdfirerilin the FAA §702 minimization [pracasilumsand 
DIRNSA or the AottiisgCIDBiRISSAlidiaBot executed aidtettruetrari wahiceito 
authorize continued mJtmtiomoftHte communication (purge affected 
communiodtans)). 


(U/ /FOUO ) Purge processes Purging invvxRyesfour processes: rtraniinateddutao 
purge, adjudicate purge nominations, esffimtte ipmgE aettims, and verif y lupmurgeac rinns. 
Other systems aateatHTtfl'cddto hold aaattein atfatte. pqpiBtl mr dtemcadl fnpmn | | data 

(b)(3)-PJL.a0®3K 
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objects. These^s&sSteras liitv'cetlbbc 

fern 8B fe r-1 1 


s Hawsetbbbi K3wwippg<g prpeecssses. The IfoJUawjhg (fearifpirari 


|6)<3j* L 86 = 3 # 


(U//K51MS)) Nomihrattomn for puingjpe Nomamtaatom iimsusitosss iitonftisatwin of the 
selections aanfltimmqjporid d'dbrviiiblchororaiimicHtjQtienaiistihe testteegedycd. For 
FAA maffiffit aaceei(Metitfiifidd in incident reportts, aanti SV determines wtetHtaippiigge 

is requiimi and documents the dktteam^efcfo pprgtg e in the mdifertt nspxstt. Purges of 
specific data dbjpits ares dfcso iiaiiiHt&di % andfessss reBBqegtirziigg corotnotittHaat mustts 
mimmitaaiiaii anitferria,bb ti tvtoldch is not ami indicator of a compilitaiEKiiin iddnn t, This 
process ikfectwmaas “purge ugtnnrecoggiJtDoil'” For tftiis type of purge, the idemtitfers 
of the ^ifeffiticcKBmmuiuaHdsMisiiarplptadodiiahd MRI4 PtL "iiis^Oireeo \st»tsf ateftbefo re a 
modified varaiiain ofttte process d&seaftbd d>ticfow si fcfiHJowfed. 


(U/tBDOW AdjjuinBo^itiggppigqge nomirretteoiBS Purge aijptiircattxifii issthaeppoessss 
wherefoy the pmintgc iayjMUdQttmnaadtbdJit.y^SHID’s Mission Suppoit-S^fcmssaaddlBina 
Compliance (Goatutp, deteaminKSS aaadd aumiraoyv of a nomimthdi gcurgec 

request!, locatestHuxidMa-e'qquBdidfdbdebJstiKttDlinnarHli^lipdeschetliatdathjedrpotstho the 
master gurggcl list (MPL)j. The goal of adjudieattmmi irs to ensure (aanplliaitec \witiipprgec 
criteria \wtHmat aD^^pjOTg^gcc»nranraaddoiisatath^ie^iepense of mission.. The 


• (U//FBMD) Evaluates the manihiaidm ag^ainsEt tH©ei^jcmiggcctirittdaia; huktessia 
deterraraattoni wa'ffimaddoddririganmdHhtnpiifflia©setBg)g}, 


* (U//f 83M^ i Using lbtgitcdJ ipamne^s^p^kldotdrialttoainohriaridiiiriddelirnmBJcs 

and issuesseoachlrotettaaihofaefisdaocreK^ery of potfflitiidl^crfftcctddcomnmniuaridmis 



• (U/ /KSIME)) Enters iittaitifSess of affected dateod^ysatts in the MPL in “disemear 
state*' to proOTttmeraaascsaMKfiafm' new SIGUNTTreprotingg (nroJtiecicootitibilid 
uses amd to initiate chedks to detemnnmu; if the objects waia?uss&iimppitdo r 
SIGIMT nKRiarih^, 

• (U/ fflM j H Mamn^ggss tlrimpattt of pending or approved desttmuutimi weamres 
that may exclude spedfe objects from puigre, 


tfflo 


(U/ftWe) IFior data ofbjjfflOfs rajiaiiiiiqg pinttgc. changes MPL sttaec of the ir 
ident ifa ss to “pungd’'aaiMgsa0£pipigEgexesBmitttcbatders to the | 

delete tfluBscod!)^ccas,afflrid 

(U//FOL®>j) feasnette tStedkttSMiMi to purge, rel ease, or quara ntine the data 

objects in the corporate ipucgfcttashbiggs^etom!,! jwhich retaibiS" (teMfRyffcL, 86-36 


VJ (U /FOliOi) The fcsdjjWpry pBSScss tjepdffikftidi btyy a limited number of indnwitlials with special access tor each 
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submitted data iitertitfess wjiHihiNBirimhlrtreccd'ds of actions taken sanilarcsss- 
refeimoes to original] corapfanuEe iinmifentss andter pongee miMnimtism a s tit ho t 
caused tftem to enter ttiTCppurgeqjproessss. 

(Uftfr OUQ )) For purges s$e®nmnmgg from system or tedbnikai] emranss, ©olenatiini amtfiar 
technicaDssitij^tmaattEe^qresrtsratyptiqailjalltyliedlia^opon to conduct or assist wribh 
purge <flks*waayy. Some aapsHtss of the aErifjrdiisaiinri proieessmiyiy be modified based am 
the detaiifc ofttte specific incidcimt, 


(Ui frouo; Executing puwigjee actosms The nm^eaxco ut^rrecebre gypaetdededmons 

from tJteiah}uy4^wiia8Ltiljbc«5ty 1 idsBaes«xiMtetQrdfd‘ers to j ~k f$eam @#iwws. :(bU($>-P.L, 88-3$ 

containing; the umq|urei(Bdolitiii@ea's ofttte data to be gwnngsaC OTgifframs racdjftt.oftfc: 

orders, changes tHgNHlLsmgtfc fotihdsesc ite Wt-Ttifiers to “ptirge," and retains nesawds of 

the piDingCcMtixm for fire® years. I l S¥&tffiuowneire are t&psptll#iblc for 

processing die orders, rendering the spedfifudi daittat unrecoverdMk, and confirming 

complettiKMi of purge execute oatfeBS. 


(U ffOUOj Verifying pug# actions Procedowes aueipsttffirmsdd to provide 
addit ional! asstmp aiag: thaf %S6srm ©mnmisshlaavq^prggideqiqaide $KlIMTITadiatofiio in 

NSA r-1 | SV obtains irantiomssaipjtfcs of data tfmmtbbe imaStappnggdiitsaiHhd 

detennines-\whether die (flateoib^cothirm'bdMKreTOmedefl-damnhelKysteJTffiii'tslsetedt ddufo r 


review.. 


(U/ /gQ)UO ) Automatism tts>Ptgg eppoocssiwgi g Mudn ofttte purge praossss 
is perfawaaBdi maiuul^y. N S A iKdfayatimihtgg aasygfitmn to auto mate mw®: of the pu^pe 

_____ f - 

(U/ iffOyO ) Reports affected by purge actions SIGIMTre^m-iimgt prn®eddimess 
requiute MPL dtedfes to prevent publication of new reports with srources that \wae 
subject to purge. Additional] meaHirassaaeaahfeBn to detect and adjjiiiifcate afinaatyy - 
disseminated SHOTOTT proaflurtts atffiotedd by a comphuntice imailfentt ®rs^pntfficdkte 
identified during purge ctiimiixwsy. Incident reports iindhdiciiififtmaiatinn SV obtaiimaiU 
from the mission team smnajjums iissiedd ndlaedl to the toi^tOTiccdMcdoonrdi&ramid 
in the incident. Another source of information its aa dial jy (psa^y inoinn % 
manngenmsntt ihtfemffitiioii s^yEeoBd'dt) SSJiNIR'pnpdadtioriaigcdQai rtitetbfflLd PL to identity 
reports ssmmsddfifeomcoranmnracadmiiiitetfcdrottehe MPL, wHutHuribbcaasesc of an 
incident anpiu^euppofrenagigtidiDn. 

(U/IFOUO)J When SfflSMTppsddaistsmthlppetfltttll^ly'tMifltndi’dScamieseararidedeiilitefled, 
the Repaitte rar^rHbev^t^BERiaanncootddiaBaeswwhMidimhTHS^telmitihaiiafciiissiied 
the rcpoitt, the pwgead^ijiulaitiaationaathhiitjty, SV, and OGC. sresnuceesaayy, to determine 
and ©offinqjdbtte appnjpriate actions. This ortayiii<ntiniMa'a^iqeKttiiigim dektetDcuiaroiwaTOevcr 
to permit retention ofttte traffic aniittilixmthbarQpapart to stand, removing the MHL- 
listed traffic caanptefed^ firom tfteiBpjurtandd'erereisgigtaayejesEnngighdiGspqDOrbror 
reeding the itqpanrt. The MUIR team mamtaiinii® alstt of affected rqKMttstaiatitlthQi!' 
status tttetti ssupdehaddwhborthfairepqio dnahsalysis roorptefcte. The pm^ead^ijidldaation 
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authority makes necessary cWaaggssto the status of the conunaMohixin iMeritffierson 
the MPL, depending on the actiom taken. 


(U/ /FOHMB 0 Table 36 summarizes the purge provisram* affine FAA §702 targeting and 
mininiizatittiri ppnaeddoresand the controlls NSA has implamairtstl to maiMtaiii 
compianca*.. 


(U) Table 36. Purge PirewSsimms aarcdControls 


Provision 

Control ~\ 

(U///FQUQ) Telephony omirmiuiiniiiiE^Barns snrafcl 
Internet communications acquired wittin tlttee 
assistance ©fFte FBI from Ihtanraat s mmee 
providers tail are not approved fair ireteimfam 
under fie sfiaimdarrdls ssaatffottln in the 
minimization procedures mofclttlnittare Immrn 
to contain ciMTrnmTFi^ of or concerning 

USPs vwllIbbed^^y^duppon-eeoggrlitiDn. 

flU//FOy@} Annual FAA §702 training addresses 
post-targeting of target (OTmum and 

situations irequiirnirmg dfeSttmtttori o6bo(DminQiora0titioes 
which rmnstt often ree^ireeiroErtffE^tcBTito SV anndani 
incident report 

(tii/jroUQ) Internet toimsadSiofis acquired 
through NSA's upstream collection ta^bpfiessB 
that do not anmtlaiiirni information tW meets the 
retention sttamdarrate set forth in the 
minimization procedures aainotitftrattaine Mmm 
to contain ©imnra of or concerning 

USPs will upiminQ9O33^ltc0n. 

(M//P9U0) Annual FAA §702 faming addresses 
post-targeting irewiaw of target and 

situations reqmirmgi dte^tcuittiiori o6fcooimira^ 
which TOSH often re^ppiiiree rrodtfTcEe^tcEnn to SV anrriJan 
incident report. 

(U) Internet transactions that are identified and 
segregated pujjfisuiatrft to the nfflqjpJhsmrrartte ftor 
processing MCTs and aresuibiseqira^^ 
determined to contain adtaete 
communication in which ta sender and all 
intended rrrapietntte aaeeri8sraBT^tyds$to^ 
be in the UJJhritteafcl States w^lllbbdhbadt^^cbas 
domestic communications. 

ptIWQUQ) Annual FAA §702 training addresses 
post-targeting wmmu/ of target (OMinrri™ and 

situations n®afpufTThr®i dc^^itDisixl^axiiino6t:ocrrrrra 
which msli often respjijjrBsniodtifietitionto SV and an 
incident report. 

(U//ft£frtl®t) A communication identified as a 
domestic communiicattion (and, if applicable, 
the 1 hniteirr^tt flraimsacfliioim in which tiis 
contained) will ttD© pframnq|Etf dnbss^ta^isstl uppon 
recognition,,unless DIRNSA orine Acting 
D1RNSA 3^fpmvo8S95 a destaction wmimr after 
determining ffltne communiicatiioini mnsdteoaitiecQjr 
more of four specific condiltiions.. 

fiU//r-OUO) Annual FAA §702 training addresses 
post-targeting mu'Em of target and 

situations ireqiuiiirriiinig dtesStcurtturri of communications, 
which mast often resgureBnodtifiatiticinto SV anrcdan 
incident report. 

(Ur/Ti)fl£0) Army coMimnium acquired 

through ine targeting of a person wlhno at the 
time ©fftoiieHrin w\a®sreasonably tto 

be outside ine UWIWStates tout! is in fact 
inside the UJnitel States at the time suintti 
communications were acquired and any 
communications acquired by targeting a 
person wtoattfne time of targeting was 
believed to be a non-USP but was in facts 

USP at the tmrn siuich communications w&m 
acquired will tettatati sasd3fawra®$tic 
communications under these pDnoDDasDtlir^aB. 

|fcl//l~OUO) Annual FAA §702 training addresses 
post-targeting n©xiiBw of target and 

situations irequiimg dtesStcuirttam o^fcocranraniitieiitiOB?, 
which msltotteini re®pirB9notjfifjQtitionto SV snrdJan 
incident report. 

tSHBEL TOU8A FUEVt In addition to analyst— 
review of communications, investigation of|_ J 

b :: jlhottaes from others wnvoiwed in prooeessma 
FAA §7Q2 information, aErmcrfi nscmaj^cxffhftfaTratid 
from dther agencies may itaiilly an incident. If the 
circumstances of the collltectimnsoquire an incident 
report, analysts and ©Vvwsnlk factor to determine 
the extent df tteanoinn^^ a^ftettetl. TOees 

used to document ttequn^e parameters in an 
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incident itisri)^ tammaas the smike© for the 
purge adpdfiirfi3mn process.. 

{LWFO UO) Communiicaltiiotnis itaitiifad for purge 
are sujibj]asadt ttoaorijijulftb^lld}^ ttocteafearmiimBe wetter 
the 

purge (Dtitaia, communications affected by the 
incident ta^taaern pmopenll^ iGttertttfeDb,<^©^otit)On 
waiver s (pending or approved)) irt^y^ifatttltee 

° i r' —— 


Mr 


T 


] The adjjiwcilcator addstttn© relevant d&te 


to the Master Purge LMtftltajaae in 

targeting and repErttifn® array issueespurge execute 

orders to appropriate systems. 

p// rQUO) Owners of the FAA §7Q2 j | 

execute the purge ©retest resTimesd^^ 

the indlurited identifiers, S0idja®i4i^ 

completion of each ornate, 

(U//F@lua5T NSA's mnaimagement iinfcmaliGiim system 
for SIGBIMT naqqmrttn® apsnirattteMF^^ to 
identify dlaot^ to the Itistt that may be 

associated with Eraiestl re^partte. The Reports uumterr 
Review team uses this iirnita^ and incident 
report date aaaimwmfrcg rTEpaoTtlrrcg associated with 
the affected ttoffcdlhaw up wih 

mission pommel for msM\ or reissuance of the 
reports. 

(i|/J// POUO) SV randomly samples n®G33DTteffiDanrn thlee 
MPL, compaffimig them to the FAA §702 
repositories to assure (EGm^lgate^ of purge. 


For information acquire d ipujtrsuimnttt to 
FAA §7(012 during a ntefiEatiwtnteEi M I 

post-tasHdimi checks msm rrcfltffmPlM 
properly, n®sajdtfnn® in uncertainty about fie 
location of the flaurgetofthea^aHraiin, ifNS^ 
determines that the 

believed to have to©m inside ItallMted States 
at the film the informatron was acquired, sufchl 
information will matt te med and will to© 
promptly destroyed. 


giuiidarncie. NSA 

of FAA im 7U$4or 7<^(b)C6<^teiidik)ifast reused 
15 November M3Twmsup^^ 
manual procedures to equa ting otete when 
NSA's postt-te^8mg | l checks awe m& 

properly. . 


(frpj-p-i 




(3/JMF) 


(U) Retenra'bom of Data 

(U) PrtwMBjxms of FAA §702 certifftaafeb®BS 


(U//¥€ffi®5l The naafiffitiian (ariigmairnthbe minimi ra attbin pfpoctedtirass coi% to 
commuoikattiMiTK mat to purge tbas&ti wpcMi (aHrmiiiffliiihiijteiaado nr^qu'emaioru s 

(see the IRsatTEoigetitrigg secdomij.}. 


(U/f FQU e t PjPgeddotsssftiadhfofett<r4ag^i0t^ j_ 

commuaiicaciKiiie wiilllteredairodl no longer than five years from the expiratira® date of 
the ceritiiflnc^ta auttaiiimigi cudltatiora. unihsss NSA analysts IhavedfetficrmihiiiBddtbhattlthe 
commuwiKatiisms mraattltoetaQritionsEaaridtddsssetftfdfiluifflthbaniriiiomiiatstibii 
procedumes, fbroangifc, anmimnircaiGms naeeesaayy to undersEaaidl tfonariigni 
intelligence infonraattram. CommuMikaffliaiK fiarwHiiiihh SIDDIR Htfsauppnyedd lfengerv 
retention amdffomhhihbi pipttgig wasa^Kattoathervei srequipaitahajjna^cal fee beiatetactaed. 


(^HP.LU.«6- 
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Communakattiintss for which DIRMSA has waived disMnattionmay also be retained iin 
accotdanane width! duet tans so f the destruction waaveer. 

(U) In gemntad. NS A may not retain llntOToetlrtoiBRCtiitiOTsbGhftddaftrMji^h upstream 
collection itedniiqqQesl olctngelriihiritiwo years from the expimatinn ddateodhtihe 
certification aailltil(M)idKiggC(ri4dtoalit)n However,, NSA may be able to retain oarraiin 
Internet tirm&'aatiknrs Itkingerif at least one discrete conainmamkaaikm wwAhin Idhe 
upstreams [hutentetttaraaatitionwould otherwise meet the retention sstaddaidsand each 
discrete ammniimatitionwitfcflfti tii tlteatraaciacti (is to, from, or about a tasked ssdtator 
or not to, from, or aboatt aatiakfcddseidetttoiand is also not to or from a USP or peasant 
reasonaflsfty bbiikteeddo be in the United S3 Bates. The minirnizadktn ipnaeddueesalso 
required destomutikm of all upstream 1 Internettrtaasttctcaiisnacqiquddeticfisfore 
NovamnDnar 2011. 

(U) BetenfcBw conMI procedures 

(U// RMJO)? System certification! The NSA systems certsfiksatinn posssss 
implemnitteil in 2010 {see the ReprosiitteiiiiEB seecfciai) )i nioialiatetiialAiAgqi’ffiy's 
requirenmsitte for complainne with the FAA §702 retentions 1 iiniitsestsaWW ivtiiiedn the 
minhnoatimn ppMeddares.To be certified, FAA §702 systems must: 1) limit n»t»mi<ixmi 
of unmniiaaimkEtl ddMai ceotwldsto the aiuHraiiaatkiinand retentionn ppeiMdsof the 
certificafiffim uurdfcrwhich they were coltecttafl, 2) retain data with an appiowd ajgeafff 
waiver beyond the normal age-off period (SID Director \waiw)),and 3) provide aa 
means to identify data records to be retained IfreyxnddtMsamasmmmir etetfihtropeparibd 
specified by the aadlkjttaiaadtMtjtyiiididervh^ iwas obtained. 93 

(Uf tpaiHOl Data lagging Data tags aaceiirowaaissieiaatddwith most collection ttoifxDce 
it is made availaWte to data stores accessible to analysts. The tags include tike 
certificatisan iuidde ivshhibh itbte oomramratitteiBt avwe letakte d edurthrtharpp^i'ping i n g 
NSA’s aflnlity to identify rcmnddsthat meet the criteria for removal from system 
repostartiesB tbssddupon age-off requiknBrnBitSs aassoiatud^’iditbacdcboretidadaifihonln 
2014, new data tags were imgBllsmsrltBilto distingmiidh aanioi^titheateteiirtiop cpiodecfor 
upstream hsttemat ttianmatiiims(two years), diowiBHMrannicddxlteuiiDi&tTfb/yo^a'atsand 
telephony ddMalfivtzeyyaask)- 

(-WP Wffi) *fpfttM ntation aflfil Processes Ijave been 

impletmamteil to age-off data in FAA §702 ) ~ | though Ihe mhmnituatiwn .886366 

procedtuitES reqopik’eddtatbe aged-off within two or five >yeaEsof expirations of the 

certification, d4pitsddiggi]Hpotiidie(mruEcof collections,, ttkegroarcsseesNSA uses for 

deteimnanmqg aggeedffreeBttltin earlier remowall of data (see Table 37). 94 


93 I'Jk -F0X.'O) NSA’s FAA §702 minimization pmcatliicssprovide no maximum retemtiicm pmurtltbr foreign 
coiramtmraatociBsddatBnnioAdo contain foreign inteltfasnuo; i lilitbuminronThe ag©-®lffi'rioq_juiraimerasippj j]_ to 
comtminiEtttiKDiBsfor whidh such a detomiisdiknnhas not been made. 

94 (tJ/fraOUJUf)) The FAA 702 certifcutamsare renewed nmusilty. ExpinaitomodtUd cniiiditidattcini efife&t for any 
colleofenwouM occur sramB^toecebetnmsn I and 365 days of that collecttam. NSA applies atsaniff critetnkito time 
of coieetiianor reconiiirtg date, not the expinaiiron ofdlte eertificaaman. 
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(U) Table 37 . System$cpe(BfFF®oeddi 8 ®s 




(HKdDl 

(bK 3 )-P:L 8 S- 3 ® 
(b|P )^$0 USC 3024 #) 


(bM 3 HPIL. 8 S 63 S 6 


. 

iiitfii# »i ,?.•■-■-■— - ■■■■■■. 

(blit)) 

(bK3>«IL.8$6386 


f" 


ost ream^^. 

rruuvuuic tQrDili 

Agem 


fetotphony and 
pownst^am internet 
(Mfosction Procedure 
for Data Age-Off 


Monitoring for Gnnftpdiance 
with Age-Off Criteria 


* (U/fP QUffi fr) Britepjra®ed£liaaH^£t«r(PEH4)iteasirraill sa&tof metadata lags applied to a piece of 

mission nfcalta m iiat it can iteiitteTttffetl ppcd>tetb^sld tti^EUesotl simdi hissraict^eldtrttTFog^botjttEtslintea^dsfae. 
k ill ©fitly accept data «itn an EDH. 


J (U/#r©U157T Systems scheduled to be decommissioned, 
f (U//ffM3IOfJ>pn3<DO)datetenadntintiene of intercept. 

8 rrcivo ii /w i i i 


ffmamm 


Table 3$s^umma:iiz6S tttee nsteflinm pasrasiois oftfkc FAA §702 targeting 
and minim ization procedures aEmtlthleococitiKpJsis NSA iinplbrnentiedl to maintain 
compliance. 
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(U) Table 38. Retention (Pirowiisi'wwms aanti Oarthttatte 


(U/I TOUO») 


Provision 

Control 

(U) Telephony (gmnfnm and Ihrttermnslt 

communications acquired by or with tflne 
assistance of the FBI from Internet Sehhioe 
Providers mn^y must be retained 1toimprrttln®nn fifoee 
years from Are wqMtthm ctetteof the 
authorizing collection nidtess NSA determines 

retention 

'f) <HW Rrpw^r^f e-s ! 

(U) System corttilticattKDxin,, nasgured of all 

FAA §702 systems, inradWteTBJteittdm 
standards comsstemlt with rmmrmEattiBn 
procedures. 

(U) Beta tags with iweat 

eelleetien feafewsiitiisiftwjteaeaaasWetddita 
stores accessible to analysts. Data tags support 
identification of records 

(U) MterriMtrair^clior^ aBOX^tihastl tttilncxDng^hNISS^s 
upstream ©dltediHain m^yrndtbe retained kmg&r 
than Mm yearns from ftte©5$in^iiain dMteof the 
certification aiuitim tttecollection, luimlless 

NSA determines that each aaaornrrm^ rms&is 

the retention stotdards in these pasmdjiiiraL. 
[Additional irequirenneimt naapardmog (\MQTisaeiee 
addressed in the Purge ssaitamj 

(HJjrouO)l (utilizes a :$\ 

software tool to search tor data beyond! tthfif 
reauired raoceduire. A snWilsr tool is 

biing d§v§l©p§d 

(U) Ihrtfenrr^trainisactiio^ tIMtsai© iisternfliiflied amd 
segregated pimsuuanitt to the Qmmiiuws ftorfMdfe 
will be retained in an access-COTtalllted 
repository. 

(U) Any information cni)irntl^rn@^ in a segregated 
Internet transaction may not be moved or coped 
from tth© sepegifed re^qaBCBsttar^yor otherwise used 
for foreign imtelll@@irffife fpupstss® writ tees iilt tas 
been (JWtenmihtwil tWs4ttttettaiT®Ktiton cfetessutet 
eentain e©mmypiieati©fti sfetowta'idfo 

the sender and aili intefnded r&ttfjj&rtfcasee 
reasonably teUtewKti to be located In the Wmtati 

-$tf¥s --i 

(UffW) NSA has implemented a 
segregation ipiroess aimd sequestered fWO" 
data is maintained in a collection store where it 
is not available for analytic use. None of the 
data suittEfjedt to sequesirafcim Hnses b©srm 
transferred to repositories mssw Urite to 
analysts. 

(Uf/rouo) NIA has deleted alii identified 
up§tr§am iWter^s®(teetfew 

November 2011. If additional data is identified 
that wasaufejeeittfettHte purge KRpiHmrant, NSA 
deletee Rupert feeegnitien 
(U) These eswttotte a^dtemmtertteti in the 
Oelleetien setft&m. 

(U) Any acquired thresh 

NSA’s upstream oolll©ntfiHiirn ppooito 

31 October 2011 will be destroyed upon 
recognition.. 


tWE eu ej 


(UJ Ovens&bt 

(U) fRrawiteiiin® afffl?lflfAf§W0E2 ceettfftediar©— internal and external oversight 

(UMFOUO) The FAA §702 targeting and minimizalMim pmBEsiiiiDSS ppresddet hth zfcJS A 
will conduct tHKfhiltawiiggooOTsigil^t: 

• (U) Implement aiaionpiiraiirceptygpitrrwith ongoing a}WEij$t)tof its exercise 
of FAA §702 authority,, iiudiiJiiiiiffigtltbeiassoraiHSidatgi^Qtgignd minimizatliinn 
procedures 

* (U) Develop and deliver ttBiihii^rtygeidiggjrpDiEderfuEetD ensure that 
intelligance personnel insqpoiJsHbtefdbnppprei^gataigBtgngf persons mutter 
these procedures, aaeswdll as analysts wiithaaccessto the aGipiiitstlffatejgn 
intelligence ihfhrtraatrap, uuddraKtad d htheiresprprabi hi Ids eand the procedures 
that appllyto this acquisition 
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• (U) E$UdHl&h ptsKssssss IforcenBitiiigg tbtaflt raw traffic itslhtetidd aattii stBasstd cm% 
in autibeamdl ntqpBattoress aaiiitiissaacesatiWcooj^y to those who Knave had tflte 
proper ttcaiiirtg 

• (U//K$HtfS^ Conduct ongoimg ovosigjht adtireiiikss amiimidiecnBceKsra^ryrappttBts 
to the NSA OIG and OGC, including reports of non- compliance 

• (U) EnimiRntiaiitoanuMtia'eicattdKMiaraitaltahen to address irtattffiddddfifiiaanaies 

• (U) CcmtiusltppckbdtiicsppxD t bhdek s of targeting dcdisioairs and intelligence 
dissenniiiiiftaKitairs to ensure tarmpiliiMtce widtitesisflabilste^ 

periodic checks of queries in daEarnpeBiiOaiities 

• (Gf/M Fir Report iiitdittomss of non-compliance with tfitentaggcrnigg aanld 
mmhrm^iism jpraaBEthress within five business dajs of discovery to the DoJ 
NSD andGMKHI’s oversight team. 95 

(U) DoJ NSD and ODNI oversight raparamoms inuHrd&e: 

• (U) Gmmse NSA”ss exercise ofttte FAA §702 authority, including bi-monttiinlly 
reviews to evaluate the implemanttaduani ofttte procedbiass 

• (U) Ommsc NSA'ss activities with respect to use ofULfiSP identifiers to query 
conMwiiinkatitmss aallte(Ceddun#(E!FRA,A§^(M2. 

(U) fttffi&oveiragjttt 

(U/ A 7 '@tLUOy NSA (sipaiatss aoctmjyeteoHsiecoorai^iitfrfiiaiawiaBto'k to maintain 
compliance wiith theffi&& §7(®2 targeting and mmitmEMteam ppc®cddurcs. The NSA 
organizattiBmosi dtettppf&mmcoeesEggafo 

(U//F@0©$ FAA §702 Autftarrttyy Lead! is respateitile omentatioiicuailid 

operatiw ofdte FAA §;7IB2 awilhnii% ffeirMSA. The FAA fM2 Authoti%'' Lead serves 
on NSA'ss corporate AnttHiraniitiios Kntogrratwn (Srcaifp and works wwIhatftbcMSI&A 
mission Autiraiijy tksald siad d'cmptpiaia t e | cjspg a b qfo$cy;oanplijpti aac ©p dtecfodAtiig^ g y 
personnel to coordinate iim^iknunttoiwtHi GfW£& mission aaufftnrtiiies. The EAA§§7JH2 
Authority Lead cadtiossess tHectaacidahlcanald satraOgiic cdfarmonts ofttte program; imtentaafs 
regularly with NSA'ss OGC, ODOC, TO, LM)). anotiSSII)rautitii<t1 y iitelotasiwi#n tlDdiJo J 
NSD, OJETM.Hfflfaaiiiti CM;:ppccmldesdlrcetitionrcggoldig gdd jJijlyappeatitooahl aadd 
technical] qpsejtanfis; aariefcoon^ to reports to Congress and tttefflSSWEoitrt. 

(U /ffiOU Qj) AuttHrurditis's Inttggmaition Gtt«nip (AIG) is admsimsimiMalJy aas^gndd to 
ODOC and nsqpsttSs to the NSA Deputy' Dfaectpr. The AIG meailtedlrecd^ywpthliSSID 
and Information Assurance Ofoaatttratte aauHtntiyy I beads , i ikthkidi g g t bh fKAA §702 
Authority Lead, and holds weeklly nraetihiigg s \riibltlthaiah<k>tyt >1 cktedainiicbcpoparate 
process lhaalds(<£igg., TD, ODOC, OGC) to bring legal, pjitiqy,,cC(mptihaote.tacbfaate)lggy, 
and mission areas togetftinar to provide recommauitaiiatis cmitbkte iinpltemotiinbon ofttte 


95 (UJ) ODNiTs oversight team is coimpimetlof ODNI’s Office ofGaaieral Counsel ODNl's Civil Lifoenttiasand 
Privacy Office, and ODNl’s Office ofltlie Deputy Director ofMational Intelgence for IntciffigBrace 
Integoiion/Missasmi Integration Diviskm. 
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authoiritfcs. The AIG J&msses on the aatwiiees of each authori%;, inttamdlaatid 
extemmdl, to ensmmee that they ata'CfflxMtdiartdiiaahdiiiniggitattdtta'OPS^S^SA. The AIG 
actsaKa'tfeciggf'AicKitiKDifwn^thiiNl^Aadddytitiagiitiisdibisimianiairiigatig the 
Directon&tes ttogmmwtfcbbehc^ ofliisxw deriransans atfBotttltbcvaiaoiwEis 

authonnSies. The AIG mpttatestltfee NSA Depotty D i rector qpaatftety y on each authawi%:. 


(U l'fftBfiiHB) Olfure of the Diimitor ofCotnjaliaikttt (OD®C)) isr^uaniiMef&r 
devdkjphgt antldliiectitipgtHbexBamiction of complliianiec siraaeg^esaaridiiaitiitiaicfo&tisBdcd 
on pnffiteBtthgj USP privacy dinning iteanjitliiktct of autkmi^dNSSAmre^iMis, ODOC 
has tfea«l!ite^ytoodde®tolp,p jnbpiphimeji andndnalUtaiot'ODfiipepedsbrK lMsMdasi o n 
Contplliiamfie Program &nitlKA^gQn^,v,wtjhililactitl-dESSsei:l (liitngtagKation of compIlikntK 
strategies anrtiimjtmasKiaciXKNSJ^AiiHsiariotedodi'log^gaijctipdl ip^lio^mgatiicHndons; 

(2) a training and (StkraaiiMsn ^program fbrcamr|pliust3ee;aBdd33i)iniat®nanQ©ce of and 
repotting oto tube status of misakem asmplliaiiree. The CMCP's ffecus is on miMi&n 
corapliiairtK, jparteoiklrfyly in Signals IiittdlIgencee aaridrifttimatfOto iA Aataataece 
opersBfiians, itinHidhigg tHaaadriMsygJg jbdsasonowMdli citidjadynfoimti oTTheThfykdjjaahjes:ti vc 
oftHre CMCP is to provide reasandhtc iSSEittaaQectlthatttfedtiggtelaatllhtitinkcsitnhpl^ieltsi es 
affecting USP privacy aacterediiifotb^y tamold\'esdtitis%] vfrfdxitosded by NSA. The CMCP 
incluimtesaatitoitidesandd'ifedidgigotsuppspo itfowtptiphanoeitiri th FAA §702, such as 
compllicanffic ttatgc t\xfti Hdatao raittii d upay ltyxtbo 1 s. 


(U//f^HE^@i ODOC's momiittsiimg aatmiaes^OTiddemniitiMiUDQUssamrasiBtciniti to 
detennsihn: tiummaiat(m«ri«lQ 1 ararepepswaiing as intended. Its atssssjaneowshhtdp 

mam^mnnttarahhatfl JhdiefMcftisrBw'essess oftHn; comiplliunnec prngraaimiaiititsts 
cotmtpsiuntfcs. For asanjpfc, ODOC reviews compHiiaiuEC aaHviilaesaasooctta^dvv'vtlntli 
quesiksiim NSA rq&Mttoiess, ihatiidiiiggtltbeffieetaiaitledotFAAA-7^202: 


• (U//F QU ®)) ODOC analyzes 


aperies 86-5$ 


forwattdkd tt® ttteqqiBryyiiaiid diuiatiakssbatltatuteb crldt<rat±i oapeofetprablem in 
coiwmmuaaiingg wiAltlthtepepitsitim oquqtiedLed, 


• (U/ /rOUQ » Itt wnrt'festHMtidllcp|iudi3esetpricitrg!ipq30-s|tHqnjeity\iiewauie arc 
assognndl tt© reviewers, 

• (U/ZPOUi®)} It momtas itfte number of queries sdkaeddfbb ra'dvkvmditdd h e 
timeliness of review,, amd 


• (U//F 6XiIi(^ ) It tradka theaigBtraadilkpqrbpfoiwdeByby SV (seetHte Oversiglht 

sectMm)). 


(U/fFOtQHSi) Ira attitinp, ODOC perfanms CempliiiawecWidnralahiijtyDDtmtvyry 
(CVDt»)rEei'e®wShdtafo6iisus on high- risk areaaswithiriithdie CMCP to discover 
complfimtfic wea&kmessas. In 2013,, ODOC coimplkttdi ttvco CVDte fooiuaaii on misswan 
complfetiuee \wtth SifflMTaatlthcitikttes. Table SJssutmuririscahttesCXTCtiDs. 
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(U) Talblle 39. CompUarroee NX^eeabtttyt^ifbise^el^vIfeawsews 


(uw reiu i o r 


Date 

Issued 

SIGINT 

dtathority 



CVD Review 

Scape of title Rteoiiaa/w 



05/03/13 

FISA/ 

FAA §702 

Multiple 

Communications 

Transactors 

Reviewed impttemientation of controls to 
segregate iinmilttoix^ti d&teftarn fNJS^'s FAA 
§702 lUtyottvssaiifl Multiple (Ssrnmuj^ 

Transactions 

07/17/13 

All 

Data T^aaiiini^ | 

Reviewed data from INI&A systems far proper 
taaaina to support desiKjpartGuni of these systems 

M ____ 


(bX3HP.lL.886386 

(U/i !FOUO^ CMC liaasaklso i mp|himnmttfitdppromises to ensure that MSA 
represantafinras to extcnrall ovosssaiKaaecaaaitatataiHlid NSA persommdl have a 
consistontt urndfaistautinig ofgnxgMiain activities.. VoA aad verifcatiiari of 
implbniarnatimi rBsvtsss saeap (ptoilwimL'd on written M^dtppsssorad^^ 
the Agency's sa<aapq isi rioian p lpronse as jng^ctetttittTO tap adtjadys i an Audi sdassumimati oandifidrifonn 
the basiis ffor fegdl cqpiiiioBS, FISC Orders, anil Esaamtiwoc HSfcandh dteaHtmss. In 2013, 
ODOC comductsii VaaAsswiihliFRAA §702 stakeholders lor (he affidavits and targeting 
and minimization procetotefissipippotriliggrirociewtels of FAA §702 ratifications. One 
verificafronri of implansnantaikm waaa;otiddutnatd in June3DIB3 wiiHiMf®AcKWKn'3Hlal 
partners (iJBdJ NSD andODM)) on proeefliires ffimmpjlidcmotihggthhf 
targeting, prooedwss. 

(U/ fFOU Q^ SV implements tfeStOIW cannTqiljiMrccpp.]gEitamcfKr?8^S?ASA. SV 
estabisflaes SK3MT coomippliaae cs tstaddnid siad <jb prariuk: £ igHdictoac ©carors ah <t IgJ uH olb al 
SIGIMT ambrppiHec.inaanggcsiincaidoWs of non-compliance, momiittiimscsnrap^ 
high fliislk areas, mssdkss prrdcllteiiss, aamkiveorfifie scbo piphasech tbugilnghi4itditsdaitaf by 
managing the SK3IOTI tet d I b gone cO0Gi(sigMi OOfFurepipjaraiDani. SV manages 
resources to ensure thatMSAa£Mrpp®atttes^ttomsaaridcegptobMiiiiesaiilggiwithli CMCP 
solutions. 


(C//REL TO USA,, FVEYi To maintain NSA P $ coittpliiamae witlhtHae FAA §702 
targeting and minimization proeMuies, SV:: 


^•.’M'VtrtTv I 


VI 

II II.I,BU - J ^ 


1 


(&M)-rIl fe-3^ * Amatos® Tfe 

U6g gflgiiftf milijzing 



("SjB e REL TO THIS A, FVEY) Performs psbtfisii tasking aatalyaitysis for FAA WKE2 
selectons snsfpccedd of being accessed wfithin tfelliniedd Sfete^ 
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* (U/ AKOUO) InvestigaTEs aJlll liudittatits otf'fiooiv<Dnpipiii^cwitki'iRjVMA §702 
targeting and minimization procsdliiiass.coocddiaiatiggwithii TV when a potential] 
incideuntt iiwdVees aasyyfctom. SV watow^thhantsrasiiffi tetaa#® fodmnraitai t 
FAA §702 incidents, promipt% nqpnttstHssm to OGC, OIG, and(£QMiC,awld 
maintains a pemmairaitt naanrnd 

• (UJ ffiQUQ) Wotdks withmissjosm fpaarssaineeland CKSC to process desttmKEttion 
waives* as nmU 


(Ui /FOUMJ I ) Conducts super aaidiits of queries of raw SH3fMTddatbbsascsthiiiat 
provide nteardis of queries to the onaifpBraee lteggnigi anvil auditing: system to 
analyze tttrecqna&3% of quay' reviews lfrymtldttnrr s 


(U/fF QUQ i) Cowtffefws ffhr^WctiSahRoiiMhMM'iricflqwtet'iyly lor 


and certain otter ssto'essthhtihWd dFA&A §702 data to assess NSA”* 
effeetiroaresK iimgm^hg’ nmiKearapjtiliat] t SMfENSTT 




86-36 


• (U/tfOUOf Oversees use ofMOTss as a saiiKKfffiDirappartiggaadd'aiirifkis 
completikmn of required documeraffinfeni 96 


• (ll/WOUOj Serves castH$eF!\®A §702 tasking Uiakmif(iiotltfeMS]SAiTttaprpiEise, 
IC ciistonures ((HffllaaiiiOTiA^fflhdwsffSEcrs from DoJ NSD am£ ODNI 


(b))P)HP.lL,83BS'36 


(U//FQ BS)) Pnovdifa documunttaioni ffoireciuwbjz>J)BIbWMS BnahcDODNI. SV 


reviews 


for eadh ^atberor it dafefed dand d retmsw aatsittiitalHi s of 


info rma tion sthaiadlwith]NS&A>fid CMTIjFapanirsel&fwaraplpdtiaa cwithi th 
dissemiratanisiii iistfpiiem©nnts. Records of database queries usihgtUSSR| qei^ry 
terms amdreecxndds oflllfSP reporting are alls® provided to oversees*, SV 
coordinates neagranssss by NSA organiratiiaars to questions from DoJ NSD and 
ODNI (fiuiihg tfhafrreawsw ofinforanaikm Wmattte aa^aliMic. 


• (U/ ffiOU© - ) Pre-apptswss USP content qperrass in conjumcnkni wrtthG8K£T 

• (U/AB QUQ) Partidipaeesiiittoh&'aOTfiikatiB of accuracy process for nenmwdls of 
certification* amilt&jgtAtigg iaiddiimimrihaatiaippeuj-bduRCS 


* (U/AR OUOf Partoen^wiiltilthhcAA^atatBil&torMEatfoitBdficiuiiatiaim child 

Traimiiiffig to develop and mngdbanentt ®\arcjg£3tit aanti ©onpHiaiuec traahingg fi&ntttec 
SIGENTT warMffircee. SV co-dkj.v3sitqp,s and aeriiswsaM 1 ufpdates oftfe FAA §702 
course. 


(U/ AROLM9 ? SIB Analysis and PiradUiction, Mission and Cawmg) liana® Ofluee This 
office siggrartte dllaarecias ofWffi^Ss SIGINT apBrtffliw®!s Hyyotyeesseoigg: 


IIliuBE types ofMCTs are made availsidfeto analysts. Two types oftuaasactioms made avaifefide to 
analplte after the MCT seqaeatnatomprocess are those that contain only discrete coimnuni oaaiQxns s(no MCTs) and 
those where the active user of the selector is a targeted indivMiudl. SV perfmmsoveisigjhtof the third type, where 
the active user of the selector is a nrwnHUiigmodlindk'iiaihidloutsidfc the U.S. (an example of "about*" cokfltanD.SV 
examimaK these MCTs for comjiiikiirfflcwith NSA reporting guidance (ISS-185- !11), which states that analysts are 
"only authorized to use those disctnateportkaiB ofMCTs containing the targeted selector.” 
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• (UZ /FCSUO ^ ) FAA §§7702 taUjiitHcattiuan i«ilditamirigg(i|iiffidif^gigw«h!3iiHil^Kjs£ts 
on how to use tfbEaaUtttniiiiyy, afg^o(sidiggn 0 W\adjjjdii«t®tor 9 ^^ 
and mission ntofiiimnerttts, aawldreeidewiggadjijdibatstifcdTRRfofbcttrapih^iliaeC e) 

• ^Sh'Mlft 'DualHicaufeadjpil&iadrionC^ppp^i^giSPpTOMsron of the results of 
targeting to the CM orFIMfforsefeiGttios'sabteaddy on NSA collection) 

• (311REL TO USA, FVCY)) FISAamtl piodbaiisan mnaftrass ((pMwitiigg 
feedback to managaanantt on use ofttitc authority and aiuit^yaikdiuhtoat)®r 
perfornmaiEBO) 

• (S/i REL TO USA, IFX l Eff)) TIIhea^ikraaiiMm o ftthe authority (e.g,, _ 

_ insitittfctk>nss for.maintainlng. eompliiansc wtfec #:-:-::-:— 

were inotcifpraatnigg, ttoggtivigg timid aa^jud<baffltdiffln cbhcfckhHLs.aadi^tgonaial 
guidance ontheaandJyiicusEe oftthe authority!.. 

(U//FQU0)) TD Office of Coumgiliawee (TV! issueppmnditdefdTo Mdntifjfijrigtg ^sssseingi.g, 
tracking, and mitigatting iGanpiliaiitectrifeksjiiridddigigUiSBPipriK^cycoixiacDrusinihfS^SA 
mission systenraiS£airasslthcestaoddddeomq5pi^cjriala:i<itiitgigsy.yffit(nBialtitatliblildFfMy\ 
§702 data. TV manage thfis^amnicooip|ihaoeeccaifit 0 lffli)iopr(p(ress 2 ss;oDt)intiDueus 
compliance; inmoirinioiiin^. aaidl tedtoriksdl aanpllhntee imddtott nafportinigz taith alte® trains 
technical) persommd. TV performs VoAsffrraaeaa&ssgBsdid to it ikNSA 
represoBMiKiiBS. 

(U/ /E0OCD') \\ | tV began asrrif(ymag FHSAsyyffiteistSMicdiitlUdkighdiEA^ $7 (§2 02 

(b)PHP-U-886386 systems, to ensuiecompliianeewtitolthhdalwwirdidjqdfliiietepptotairtgi^JSKPrpricycJis^see 
the RgptfflitoniBss ssutiim)). 


ftwr 

(b))((3)HP. LL .886366 


(U) Hoc Offer 1 of th® Gemeuail Cowitxdl provides legal aattuitee to NSA atari! is the 
liaison to DoJ NSD tfiarfftSMs s FAA §702 program. One of its ranaainamr^iltit 
responsShiiiitiks iindluttss iinihp^#<nS]% aaseessiggpptuatitihlirioirldoms of non- 
compliance. 

(U) OGC BffiiEQMessreppdris of potential) inewtotej of non-CKMipihaniEe iftmn .W. OGC 
compiles FAA §7WJE ibriiiartte <fiai%, provite item to DoJ NSD and ODNI, and 
makes amihiiiidl dteumrimaitwir wdahdthcrniiididim t reprpKeEttiHoneaotopilai^iisii <wd ttv iHe the 
FAA §702 certifications and Haggling! anflmMMniHatitjo npprocddtascs. OGC notifies 
DoJ IJitSDanridthhe ODNIss oversiigllrtt team of potential) indiiartts of non-naanplltaKec 
with tfitettaigetingi grraocdataessra*^ of discovery, asEAA§^702 

targeting procedimess i©piiiK. OGCiteowBWssaHllppappoeddctissecimiatiDoas of 
information! csMtttihuihrg HlSFtnttiroimyyc-liriujpiprikiie^cdoimmimiuimQris itetorfo rc 
dissemmatisan, ass NSA"ss FAA §7SE mmimrikaiiim pirffieddiutcesreqopniee. For ail 
violations oflMA^s FAA §702 targeting and miniiiimikatisri [ptmadluees, Q8S5T 
coordinates impiuitt from NSA ongarikaiams aand aJStts tlfeccantaati fafofafaattt a&rahtb sba|a 1 
accuracy. DoJ I^fflEppeppiecRfilBlc 13 notices, in coondiinnattian witfh ODNJ. 
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(U) OGC performs adMitwmtil o odsi^rhteEpqraibibiiiS esidhiduitijng: 


• (U/IFOUOJ Reviews lisqumEsto perform content queries using USP selection 
terms. Only OGC approved ssllaminin tdsma <e anrbe used to perform aanttent 
queries ofUIJSP i hf&rirmitDim. 



r. ~~- 


W(ij-P>:L. 

USC 



• , ?f§/751/V'NFr ReviewsF 




• (U//TOUO) Participates in the Vo A process. 


• (U 1/R0BI<0))) Reviews and makes uqdtotesto the FAA §702 course, as 

necessary.. 


(U) Office of the lir^jHattor duaneeri 1CKKE® Icouddutfss audits, spadM siMt&v 
inspections, iiii^tjgiaitwiiss.and other reviews ofttteprngnaants and operations cdfNSA 
and its affiliates, OIG oversight iindlidabss: 


• (U) Performing midiitsand special sJUdiossodftteFAA §702 program 

• (U) Receiving mntffixaaimnnof incident [reportsffaralllNSA authorities, 
including FfAVA §§77J32,sawddri ithe Agency’s ffiwporate modern naqpotrtriiBiig 
database 

• (U hTOUO) Rcwibwiing OSnggceskioahliiratofiftaalshHiand notices filed vwithttte 
FISC ofihuiifcints ofnmiKimnpiliatiia: wiiftiFFAAL §702 targeting and 
minimizatMM ipraestlnes 

• (U) Preparing Ihtelligence Oversight (QbflattBfjy ERqporSs, in coordinatim with 
the DIRNSA and OGC, that summarize onnrqiiknaeeitioiridetstfor all 
authorities occnfEiig during quarterly review periods and forwarding rite 
reports to tte President’s Intelligence Oversight fflbard through the 
ATSD(IO) 97 

• (U) Performing iineillgmeeoosreai^^twiriwridiaiEiiOGfi^BPPriitiiansfgxfjoint 
and field ssitass 

• (U) Maintaining tlteOIG Hotline, responding to complaints. iindluUmg 
allegations ofl'SIGINT mismseby NS A affiliates oqpBratmguuddeiCIISRISSAs's 
authority 

• (U) Reporting iinmediiffleiiyto the E) )aa1 dwlrippeietn 0 irmratmimstoece 

involving an intelligence activity oamhMtiigence joswDinriril rbhatctcroldldmpugn 
the reputation or integrity of the PC or otherwise aalllinto question the 
propriety of an intelligence adtrirtty. 


97 


(L F OUO t In 2014, the ATSDt(B®) was chamgstl to the Office od>£he SeniieirDoD IntrilltgetteeSJivesHi^hOffidiiil. 
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(U//F QU OJ The OIG iKewitew* tuoa ma genoBti tcrathtrbls mainiainki awarenresEsaf 
compliance iinni&n^,and stays informed of changes atffedtmg NSA authorities, 
including FA A §702. OIG iKV\iimssof the FAA §702 program ail few it to 
independently atssjcss cwyifaiiinE vwiHinmihmnzhtinipiiiasifidiitiiires.Since the Agency 
obtained FAuA §702 authority ran Jfcuuainy 2008, the OIG Itessmsintfitetjafl aatmouailrmvcavss 
of reports msittttimhgg rcd'&eeracssto USP iktemtities and targets later determined to be it) 
the United States, as the statute rapm®*. The OIG has also OTmffeteil two special 
studies of the program ((Tattifc40|. 


(U)TalbNe 40. OIG IRteriews of the FAA §702 prognanm 


(8H/N P I) 


1 |-- 

uate 

OIG fftewiaei/w 

Scope of tlhe Review 

3/29/13 

(U) Assessment of Management 

Controls Oo«rFRM§§TO2(^T1-143009£) 

(LWTOUO) Reviewed management csaiittaJte Itoir 
maintaining compliance with to^tirog aarrafcl 
minimization procedures. 

10/29JIH3B 

tn' tl 

-tWTTPTI 


/CJiUClI fl'! 

± ggg 1 > i_JH 







(bMl)) (ewtft 

(bJPHP.lL .886386 

(U) evemsgiit y§e aoMtf) 

(UWOUOD ffibJ NSD amdl ODNI (dferfy araamefihutte to perform gmaBagptt to ensure 
that NSA”s> FAA §702 program is compliant wiMn the statute and FISC rulings. DoJ 
NSD is the primary liaison Iteatwaam BSSA and the FISC for all nffltttto$ pertaiijiiiin^ to 
the FAA §702 program. DoJ NSD and ODNI oversight imdbdtess: 


• (U/ MDUQ ) Reviewing and approving ainruall ceetiitfilaaaooni aemnlaland 
updates ofttte associated tSingatirig aaridminiimi kairan tpratmtlunss aaddlfifag 
them for FISC approval 

• (U) Providing sgiiiitanBE to the NSA SM3C$uiHqgill the 

interpretation, seesefe,, amdl i m^tenmDliaitoMi ofttte FAA §702 authority 


• (U//FOUO) HtoMimiiijg bbitiiffiiiggson NSA proposals to substantially mmodiffy 
systems or processes supporting FAA §702. This allows M$iD> to determine 
that the modifications ase lawM and that tihe Attttmffijy OSouesiiK AX55)aa)±ltte 
FISC are aware of the scope and nature ofttte changes 


• (U) Evaluating small iiiaw^^ing pmtotikliteiddettfsofiftMweraii^ 

the statute or procedures aumdl repurttiini^ an>ymnttlm'ollBtB'miiTiKtl to be a 
compliance incident to the ffUSC 


• (U) Reviewing NSA aaonkJtrtiiaiiiakigr£tii£siast|lif>tbo ensure tihatthhey 

accurately dksmflte tfe irapiiKamnrtfe ofttte FAA §702 Orders 


• Performing Ihikmimrilnllw rmteavssofifNSA auttfenfttQS-; wfaJcrlth d 

FAA §702 certifications. The reviews imcDuidte NSA’s ttanrpsttnmgr decisions. 


1 
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incluiifcrg soun^xtiammiictttfltionsapppaitigigtllfaesddetoi'imriaidisns, to assess 
compliance mtittUci NSA targeting proceAiiites aidl AG Actquuitsmnn (SuiMihnes. 
The reviews alsoea^nteddWbbsiesqupttH'jQisii^ng USP qimagytwrmssiarid 
dissemnimsttiiGms of scrialiiaeifl repeating! anatHENtfr. 


• (U) JPtaqpalring the petiodic reports the statute iraqiircss: 



1. (&'WF) DoJ submits ttte Semmmnull Mppoidsofthe AG Commmii]§> 
Acquisiittitems umlderSSedtimi702 of the FJSA to Congress amd ttte HTESC. 
Pursuant to FISA §707, the AG reports,on th e acqu isition of foreign 
fmclligchcc nWlmatran tctfliTdiictcd ■ under tte^H JF^Ia §7Wp 
cerfilffccUtiwms lbyI8®A antiHffll. While the CHA does TOttarepurecthhc 
ififwnfttm it may if^ivg miiiiy data&Et NSA and FBt 

The AG's semiannual nqpBttefifooas on analysis of incidents ofmam- 
compIlffianaE mitHlutagcdiiiigg aanddnnmiimnaatioippinsaddnBcbjb^SIS AriditfEBl 
andj maictiintss of non-oasangfijaiiiiec wwMTnriripmteatwiip pj®esd^Bcb£ £Gi A. 

2. ^.[ r N[^ ' l ]Hloiiilil|ly h the Ad anti theDNJ submit the Semimmm/l Mssesmmtxts 
of Compliance wilh.Ifrocedumes cmddGuidelhms /{sme/dfFmrsaanto Sect'mm 
702 of the FISA to Gitpgress and the FISC. These repmtesssutiwttaiaeetlthe 
oversiglta perfonnmiad on implementation of the FAA §702 authority,, trends 
in targetting! arndlmihimizariikmt(egg.; change s in the nwntbsrr of selectons 
wider collccttibrai and statistics on use ofttte fc) ~~| certif?iottiiiai>s>h and 
eompliamme iitetemfiswritltlihFFAA §702 authority for lM£A,flfflbiaddtlritae 
CIA. 


* (U) ODN1 livRStsblwmnothh^yintKteJtggODpynmetjriggsaaddi mvteVlpIphmicatlaiM) to 

discuss FF/&A §702 implementation anti emagihancae lmatters. 


(bMD) 

(b)P)}4?IL.88G306 


TSAi'NF) The FISC reviews and, when satisfied that tihe legal neqpiiiremeots ihavcbfoeon 
met, afltgnaMoss all renewals of certitficaiicans andttagetitiiggaandd tmiijinimitann 
procedunnais ffimttteFFAA §702 authority that have been auttefixdd tiyythtee Affijaanld 
DNI. 98 In addStronn,. tite FISC reviews rafpceeotaation s NSA made ncQgarling ttte 
operation of the program ate RA 13 notices of incidents of non-compliance filed % 
DoJ MSBcoutteehalf of NSA. If theCflWHttflhddsthhnlri(rididaHts of non- compliance 
result from processes iiimansistent wiiMithhaag^iarigigaadd mStimzarikm proorihress 


Jiisflentification), MSA willlhbe 


(e.g., iimampikte 8fiiphcat|oiti (Me the 
Required.! t© etihfage its internal systems or proedhurass ate rapport to tte Court on the 
p'tfepess nnnade to achieve compliance. The Conittma^ldgoddkonmoctUtenddditTOalal 
measures or changes areii^initdtctahhcttaggdhggaaddnirijmminkioiprpmdcdeis’c^elg.g., 
sequestaatihan of MCTs)f ifiit deems tflrat NSA process do not atoagunkjy prattett 
USPs. 


98 (U//ffMIQ)'o The AG and DNI authtfthzethe contention odiflata pursuant to FAA §702 using tair^aningjiunil 
minimization procedumesiEdagitKilby the AG (in consutaiiim mhtlthe DNI). The FISC must approve the 
ceriifitettiomsand associated ppooeddtacrhat the AG and DNI have autfaediaad. 
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(UWfflUB^) Tabic 41 summanikes tHffiav^es^htppcxnaskias oftfte FAA $M2 tangcdiiig 
and minimization piociatiuxesaaddtIth c«ancilQ 1 s NSA implasnnoittati to mauntainn 
complfeanaE. 


(U) Table 41. Oversight Provisions and Controls 




Provision 

Control 

(U) NSA will implement aaaBnri^lfei^ program, 
and will (BOTBS^twitfln reappeitt 

to its emm'scB of the ajittinsxirtyy under FAA §702, 
including flte associated tegpatrngg aaidd 
minimization procedures. 

(iii/, f roucr) NSA operates a©Mpt®ftnem 
oversight §anni®w^ compliance 

with te FW^§fn22tto^t^ 
procedures. This compliance famarark \m 
collectively managed 
described albows. 

(U) NSA will develop aamcsti c^luas-rttBaiirirngg 
regarding ttllne applicable {tommies 

intelligence personal rBes^Gaarrralr^^f<tora^ppcx^N^iirgg 
the targeting of persons windier these fpoareastluesss, 
as well as analysts with aBTETBSsesttottlne aaqqiiriedd 
foreign intelligence iiniltonriTii^ioTi, iimfeEdtoroti tneitr 
responsibilities and ttter^iaEjrBaoEiuiees tttla^tapply to 
this aoapLiEBttbmri. 

(\J/W€W&) S¥ pairturneirs 

Directorate for Education ®ntlTraining to 
develop and iimpllemarntt oversight and 
compliance ttraiiniing fbEjrttte SIO IWTT wzxDfclfetocee. 

SV co-developed and reviewed adlluLpMtesQf 
the FAA §7ffl2 arauuae OGC also reviews aim# 
updates tie FAA §702 course. 

(U) NSA will establish processes ffBrr©murirgg ttoltot 
raw traffic iis labeled art stored only in authorized 
repositories and is accessible only to those who 
have had tie pirqp^ltiGBmhn® 

(U/JFOUO) Wra^fiess 

periodically, iircfLudrn^ ttteFRA^§§00^ytenn3$,to 
ensure W 13 U tlHn©^ aacsnnrflEl^ with law and policy 
protecting USP privacy, TV’s certification 
process evaluates system controls fterr 
maintaining compliance in a number of areas, 
including dfeato lagging atnofcld&teanBEsaB. 

(U) NSA will conduct amnpann^ oversight adiiviies 
and rmdteaii^inieoessaiTy reports, including tto®e 
relating to incidents offirDOim-compliiance, to the 

NSA OIG and GOG,in accordance with ttteNSA 
charter. 

(UfjfTOlUnj) 3Wand TV investigate incidents of 
non-compliance with FfMA^QD02tfeBng^thn® aarod 
minimization pirooBd^ SV works wiilftn 
mission ttearrmis to document FAA §702 
incidents. SV fpjK®rr|plt^ re^tfepdterltMl 
incidents to OGC and OOOC aairch maintains a 
permanent record. Wtern a potential firndidteniitt 
involves a system, TV manages tlta ihrriataiitt 
investigation, 

(IW/rQUO) The OIG rra&wes notification of 
incident reports for all ®jLitti3Enrtt®3Ei, iiimcTIttiKEfliiimg 

FAA §702, The OIG alls© re®eehsss 

Congressional rrtiffiEMiMs andnodtieesftlfeldd 
with fe RFS&Cof incidents of non-compliance 
with tHne RMA§702 targeting and rmmmni^ton 
procedures. 

OGC receives notifications of 
potential iimmfenitte of non-compliance for all 

NSA authorities. OGC compiles FA& §702 
incidents ((wlhiiidto iit[^cnvitet(tcDoJ NSD 

and GM1I))„ and assesses wetter irmaclteniife 
represent ipesstelte non-compliance with ttte 

FAA §702 certifications and associated 
targeting and miiniimiizalioifii pQEKBEatUress. 
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(U) NSA will ensure fiaO rnfflEHSSSBai^aOTrGa^tra 
actions areflahn to address amy litoirttfitestl 
deficiencies. 

tWEQUQ) SV and TV investigate all incidents 
of non-mmplliiairice with FAA §702 targeting and 
minimization ptnoicediiiJiires aarott monitor corrective 
actions, 

(U) OlG fpetonrms aautii(te®rid^p©BeBll s&tidofessof 
the FAA §7(02 |p®®enni^; tracks 
recommendations until completion. 

(U) NSA will conduct REErifiidirE spot checks of 
targeting dteoisms and intelligence 
disseminations to enswjffe compliance wifn 
established pnoiDe^iiiies and conduct periodic 
spot checks of queries iirm dfsfll& repaattsnr®s. 

(UWFW6) SV performs oversight of targeting 
decisions, qjuetriies.aaiiT^oHsBaamrrir^^ and 
provides documentation for review by DoJ NSD 
and ODNI to support ttlmroM^^ of NSA’s 
implementation of FAA §702. SV also ccarndtiiEfe 
super audits of queries of raw SKaifNIT 
databases. 

(U) OGC reviews alll Fpap®®^dctiseeiTiriahtiDasof 
information 

privileged tJaa^banae 

dissemination. 

(U/MWUQO NSA will report incidents of non- 
compliance win the targeting and 'mnrraraacitjan 
procedures witthirm ffwethi stress?ddy^saStttfecffl'eejry 
to the DoJ NSD and ODNI OGC. and ffiUDWI 

CLPO. 

(Uf/FQUQ) OGC MtlFfes external overseers of 
incidents of possible rmranoompta with tibiae 
targeting procedures within fte tasrmess 
of discovery. OGC coordinates input by NSA 
organizations for Rule H 38 mcttixsss 5 ppeqaaeddldoy 

DoJ NSD, in coordination with QMm\ ffarrai 
violations of the FAA §702 targeting aimd 
minimization praoedyres.. 

flU/JEQU&l DoJ NSD and ommil MrikxwMnee 

NSA’s owdse ofttlne FAA §702 auflhoir%» whiidln 
will include ItaHmnittlri^ reviews to evaluate fttne 
implementation of the pro®diiiiT®s.. 

-| j 

DoJ NSD and ODNI oeffltomi bo+mrurtthW 
reviews of NSA authorities under the!) 

FAA §702 ceiriications. DoJ NSD and ODMII 
review t^g^flrti^ddeicai^Qa^lriiiotiiiddiiggttte 

source dbmum&ittdlouiii 

determinations, to assess CDephtodeance with INISft 
targeting pirooediuiires and Ifcjney General’s 
(AG) Acquisition Guidelines. NSD and mm\ 
also review queries, arndcdffiBB$imrreUtcmneB of 
serialized (T®pfliirrtlinin affradEMT. 

\ufimmf) DoJ NSD and (OXDmil vvUlllao masse 

NSA's activities wiittn ras^jesaitto use of USP 
identifiers to qpar^ cBaatimTii^ oollletited 

under FAA §702. 




(U) FAA §702 Incicterrtfcs of Non-Coniwfflilaaoee 


(bMH)) 

(bIPHP.lL .886386 
{hf^sBO use mw ) 


(U/ ffOU Q) FISCffiultes of Procedwtc rapiiTe MSA to report to the ffIE8C"‘do®iretidosis 
ofmaacfiiti] ffeaS’aadddWctotoEareefotb'niKimmpliaptia'ii mlh\Fi4toVB$02.§ 702. In aMitem, 
NSA dhiBrmuiee avhdlMre iCOatgi^RS semi! atiattficfidatma nar® reqvrrfails.'cd. 


(U) RSC UiMss o/F Procedure 

(U/V FCMJ 0 )) TleKB80®lde©SIr^reduthi^)\gafHsdihSl$(E4S6'cpedtH®sliiigs. Rule lffl, 
Correction of Misstatement or Ckmimimm; Diwcfamwit’ ofNm-wmnipiiame, is tite 
prtxooitluia: M^SAfcfD thaw svfofam otbfy fygi ghdiGdCroti r th tbngfog BDOoBI StS Bfi o fiteri (tents of 
non-eeinpdlmiUKwdtil 2. 


(U) Rule 13(a) Coireetition oflMatehihl Farts IftHffi govenusumtt dnstmeams tthattaa 
submiissiism to the C<miitcant]^eddaaiiiiHs& of mateiid] tfaett, titec 
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government mmstiimmadateity, i ii nvwritigiginfbfaritli otlfcdjjdge whom the 
submission wsasmtatteof: 

(1) (U) the misstatement or omission; 

(2) (U) necessary amraattrou?; 

(3) (U) the facts and circumstances rdbawantto the misstatement oorcoTriisMKKq; 

(4) (U) modifications tite gpwermnent t has made or proposes to make in how it will 
implement any authority oira^Troviil ggratudcby the <Gnutt;and 

(5) (U) how the government ipcqpssssto dispose of or treat information obtained 
as a result of the irrisst ttttemeiii t ood miasisron. 

(U) Rule 13(b) Disclosure of Nbn -compliance If the government dlkjmmistllatt 
an authority mra^nvdilggmMicbbjtlthCGotiJtas been implemented in a manner 
that did not comply wiithrtte(nnutt& autttajtiizsttiKiri or approval cnrwiilhappjibalahfie 
law, the government must t i mmodifadely j n writing, iirffrrrm tlteilidjgeto whom tite 
submission was rmatteof: 

(1) (U) the non-compliance; 

(2) (U) the facts and circumstances nsdteaanttto the non-compliance; 

(3) (U) modifications tttegpwoarnramthhasimddeor proposes to make in bow it will 
implement any authority mrajpcpavail ggmttecby the (Dnutt;aud 

(4) (U) bow the government pngusossto dispose of or treat urffarnifttixmobbabindd 
as a result ofttencanonmpdlumEBC. 

(Uj) /detatrfyihgfi tag c/aRegl cRripp iticicje i Iec KriMdB-uzDTttyftbairH; e 
(U) kteniilfyihngj mdidtente of non-caafiffilmtiaBS 

(U/mve) All potential iiteiityntsobfiraTremnpJlkna.'eewitlh IF$y& §702 certificafifflnsB 
and targeting and minimization piKHaailuEssawrQ eppflBtddlo SV or TV upon discovery 
by analysts and others operating muter ttte auritott^y. as documented in the FA A §702 
Progmm FForammvkrkection -IhuMent RecognMm LwcidRep«Bn1iitg>. Training 

provides mlte^toaddssBHseof awareness fftepsisamtellto identify jpwteitiitil 
violations. Incidents may also be discovered tihnui^ooeeai^^tnntecdmBEissns 
addressed in the FAA §702 Progmm ComtmeUFrammwoM: section Post-Targetmfg wind 
Overnight. Monjtoinnng and oversight iindlidtertiuanahland technical aroUtoAisto detect 
abnormalities. 

(U/IfFOUO) Adter newisaw of the iinditbmt,SV or TV forwards dmumarttatixm to OGC. 
If OGC believes aavvdxMtutacmof the targeting and minimization ipnoexeUuxes Uuk or may 
have occurred, even if all the facts have not been gathered, preliminary nutiffijaataMmis 
sent to DoJ NSD. OGC notifies DIRNSA ofinmtHnj3esoiffioore®mpjitinciee,ass 
appropriate.. Upon receiving iiriitMltnaiifuaatixnifrom OGC DoJ NSD drafts, in 
conjunctessim writhODNI, a notification to the OnuTt, sltaultdOTrelteii^^ 

FISC Rules of Procednme. 
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(U// TOOO) On<E®tte:ffee4ilira®'belMEgagaatocdndt(acS031aslraadiiade an initial 
detemimaiam tHiataaino^EmspIplinn t FAA §702 event has occuimadL GOTffhaiilizesaa 
notMottimi of notiNaanf(Mai»ec aarifffoiraiatsl atitctoEBfi J NSDamdi ODNI, whMi miiilec 
the filial detfifiminatiism as to whcltoitieeechhafetetcnnaiiiihiadcnt oftimniHe©oiplpiituKe 
that manat be nspateeti tt® the ffUSST. If DoJ NSD and ©BM determine that anihoeddotit 
of non-(Cfln^liai^el4a3c)OCCiiBitd, DoJ drafts atnmiffetaftmi, wdsliite iis ieototlrditnaled/ithi th 
the IC elememts imwikadi, llmdfess ittauwaid tiltas the mntceewjvrfliithbcOoottvt. 


{bK3)HP’.lL.aE53K 


(U//F0UO) DoJ NSD often ffeHhawss tqp on preimimaijy nmiffnaaiiofis wiiMionee or more 
additiomtil motaffttattimss. In some (mass, tlteppeiTlmmimy y no titifetati® 11 of an kdrthntt 
serves as the final liuittke of that iiruiiihfitt. 99 

(U// FOGM) }) In 2QEB, |o [ incidents ofitflumeompOpiiaJtcc (I3(bM wcneffl kldmthhtbbc 
FISC IfermjffittosddiEditi&tdiiithtitalahaldnd^eycar. None oftHessc incidemds inwlkstti 
inaccurate i Mdiunrnatio ni liipprehauiHi^l jfi lStbded hoiaratio u s to the Court, requiring that a 
Rude lEfta) notice of coneofton of material! ffectbbtfifddd. 


(U) CongtHsasBMxmhlnotitiftttBcihsns 

(U/ifOUOT DIRMSA,. mlheati of an IC elemmt Jiiiaaiatstatua^y)blljiigat»ro itddvkepptlth c 
SenateSdtectaommhtfeffie on Irnttealllipntia: ^dithhdlklosBP^aimaneSfelSdaEibifiiMCiatittee 
on Intdliggnute tfil% anill cuimm% rafferamsdl of all agpiftnaamt ihtfelHgemteeaatitiitities. 
NSA mssdhessidobtetsalabotumatiffiid&datmo m totfavo r of notificaSKan. In addittikan too 
notiftiuia: Gaqposs antittfeedilBeeto r ofNNaimaal Intelligence. MBKSA imustnocitfrfy 
thelJ®^®)aarid3thteUEB®(I) staff, asdfetntetl 1% USD(I)) giudaatae. For all 
FAA §702 incidents ofiimmecmplp&iamctrepptatbdotCiStgrgreisaiQhahtaltqiiijcnicc 
comnmiiittees, NSA also provides (ftisaraicmayyirMjilliiBtmtiQns to the Senate antifftoisec 
Committees on thelhdiintar^y, 

(U//F©iH©i NSA’ss LAO manages NSA'ss liaisono wittiitlth(CGmgtgssss;uati.dvftfrkhthe 
DM Da02!,tlfeeMCafflkd)dtfecUlS.%n«raBnme!dept^nmuenttn(hit4 r sTBdB£ncegarddanigli ng 
matters of concern to CiaqgKsss. LAO is NSA’s focal point fan'(Emigress skinh 1 
inquiiiies, corresponM&aitE:, q^iessfduRFi s ffor ttircreeoedd paiiRRF tiildinedtcth tdS^SA. 

(U/ff QCfOT MSAJC8S iRdltgy ll^pitrmddesgghldBH^sfdbrdidetiftjdggignatttttfithdthat 
OGC anti LA© miuistt aronjikicn-eppxDtitiiggtito tihcffiiftggiresiaosilaHritdd^ffiKeccttimitthafies 
under 50 US.C. §§3091 and 3®82. The giictfalliiess dto matt coisfflWntE: atBanpretfalerawee 
list of what must be repostoL Comp&aiuB: iinmtfenits arecaasQsssddindHta gegertdral 
guiddlinc to consider tepaiting; materKSttohat tltednttitiUggene cc«ramibtitii teeiithave 


99 (U/ MIQIiM DoJ NSD fillES the “(kmtieirihr Report to the Fmm^tiBmiK^mw^iiwalllam-eL-tJmtit'lGZmoeeftingg 
Compliance Matters tBiidlarSiaailmiTIW of the Foreign) hiieM'ttgmm’ SiunmlllamicAkf’ which inctaks iiioiddmtDBibJ 
NSD and ODNI detamriinstlto be vioMisnssofthe targeting and miniiimKntc»np{nicmti(taret.l 3 s1Ib)^) as well as all 
other incidents dhturnimindchot to meet the repmttjingtmpiiiicmiaemsf 13#t).. This qiirntrallyrapartto the FISC also 
provides supplement tdli irlfemnuitioitm previously' iBpiutoddcompliance imtiMteiifc. 

"*(U) 50 U.S.C. §30® Q„ as imptammcrtlby Intelligence GnmmuMijyCBirebtis'd JJ2, Congressional Nmficaman, 

16 November 2011. HBpibss the head ofeadh element oftiBie IC to inform CongtBsss on signffikaatit inrdllkOTiice 
activiiliiESs. 
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expressail cflcowiQitiiiuuiQgiiEtteEesiiiiiQioiv'yhfchtbtlneamds^uqluitUifiy sasirigoifiicant 
intelligence aaatti'iiifere so ofailurex. 


(UZ/fOWO 1 ? NSA works to keep Congressiisirail intell I jgencecom mitttaes fully and 
cunEmt% infomrf aitanult^(A^ui}cy'«cai^itvrcSasvcivand above what is strictly 
required! to be repotted i indole it Haeggiddhlie®® uolitiudech MSAS0SSSR)]R^]ity33. At a 
minimmm, IhmweerNSA must keep the CongassffliDuiil 1 ktf&lUgsoceccuammhiees 
timely inf^mmeil of all major inteliigBiiBe pdiiriiES and activities and provide the 
infonnatisMi tbraeeComnmttecs rcsqwsSt. 


(U/IF ODQ ) Determining whte HuerOSnpgissioiiiHialladuildatiatioshoidd be provided] iisaa 
judgment Ibaesdiomthe facts and circumsfflutces and on the nature and extent of 
previous mniffiraMociBsto Congress on the same matter.. Not every inteliigaiKie aadh#ty 
watTautteCongressii5irall ntetfldaation. NSA’s analysis ©ffthe FAA §702 incidents of 
non-compliance filed during 2013 resulted in two incidents reppntfcddi mnOSGggrmriroaial 
notifkattiims; one related to a 2013 incident, and the other to an incident first mpputtdd 
in 2012. 




(TSJ/SfJil^ f^Cggg^aiada NNtfitfitra tion; [ 


J reported 


a retention 


~P-U- SfcSS and dissenronsatinn CTOnpjitinoednmdbjHritivotMihpr^ NSA corporate datafcatHE 


\VY 



SI Congressional! fifeillrcation, j j^rdO^dded le solutiom of a 


matter first rapKKDteddto the (nmi#e@SKmnhlintd&i±ia^ 


_IThis update ra$pottddon the actions taken to resolve tthe 

matter; “mcUaiidlaantg cotiositran of the atftoedcls^Mmicam^ccnuntp ipigrgof affected 
transaciMUK, werffdantionthat no disseminated mpsatlshad been based upon 
overcoBbctoil rtjiafciand impleamraithttrom of a post-acquisottinn rc&vdmwof this ttjfpeof 
data to identify Ifutuceoareccodihetition. 


y'wmmt 
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{U))lri€icfi^nttNom<mvrfl$aan£m 0023013 ^p)-P.L. 86-36 

(UATOIMJf In 2013, DoJ reported to the Court f) l incideantte oiThffiim-cwpjilFtiiiiie with 
FAA §702. The incidemfe and rates of occurroMie areein Table 42. 


(U//FOUO) Table 42. FAA §702 Incidents of Non-Ctenndlixmia 

Reported in 2013 


tmrnmn 


Incident Type 

Percenttqge 

Tasking Eirras** 

12% 

Dttasking Eroef 

19% 

Non-compliance with Notification ER&qiiiirainn^ 

57% 

Non-compliance with Documentation 

Requirement^ 

5% 

Minimization Errors" 1 

6% 

Other** 

1% 

* (U) Tasking ©roma^—foreignness suupporrlt was insufficient to support tfc^irr^ (e.g. ffmeiigrmess was 
not reestablished ffaWlowiimg tewedlto the United ffaffiogn intelligence purpose eg^teradtiun wass 

insufficient, or a typographical error was made). 

f (U) Detasking error examples include: ((1) delayed detasking wltiiidn aGramjJEswtori 
intelligence target, reasonably ttobfeaaulteiiitetllb^ltUtete^®tt®test^h#i^rtiian©fofetetQKgT 1 gpacld 

later teams tiMttetfea^t^ to travel to the UJJhntetl hultafctassmuttdJeftaesik the target's 

selectors teffen© the target arrives in the OimfaH SB^Ltes;^rcbl (^JriiacxDiTinpfW^tedteteBito^ of all tasked 
selectors when iit is determined the Hargett is rm© Itm^TedtogfcdKte fatrtee^rriip. 
t (U) Notification—NSA's targeting pirroedwires reapjjrBsceebaaininbndietetBt^beeppildddo NSD and 

ODNI witflrihn iff tea© inddlents do not iirwdve with tttne 

targeting prroaaedj^^ Specifically, NSA is required to teirinmiiTr^fte susspijj^ttbEjri aairaidnTix^tlr$yNSD and 

ODNI if "NSA concludes fnaft a person i eb nssssssrr^jd^y ttoiitctcbbdotrsdtatibdiifltetefiefy ftJteiteStates 
and after togeing this person learns that the parsasam is inside the United States., or if NSA concludes 
that a person who at the ime of targeting was believed to be ©riwi41Jhritted ^&tesspmsB3Enn was in fact 
a United SMtes person,* 

1 (U//rOUO) Em©-'The targeting procedures require tftn^iItU^^ |^«3Dxndte^Gd^^ tbD 

the source of information upon wsliiwxlrhtrtlaedid^eirmiiTia^twano&fhtbsfctoiigiginieissssvaftsasiandadeTfTHsese 
errors, in which tlte dilations w«ranDbtawsyd®iEddaddqqs&^ iiuserroff 

the selector lasted,, waisiGteittffesoti through DoJ and CSIENWIreeiuseiAOf NSA tasking. 

** (U) Minimization errors may include arms in querying, reporting, and n^tenttinm. 

** (HI))The "yHifflT ihdtorttt^^otfillto fp^nHarmsttcirr^terae® in which systems that support complliiainice 
are rratt©fp®ratJhr^ aessi lirStertrictefcl. 


ftemmef 


(U/tfOUOf Exanmpltess aftiuDdillaits, mdadihg actions NSA took to mitigate 
recurranrcc, follow,. This inforaadtar is taken from the 0((b) notices DoJ NSD filed 
with the FISC. 

(Ur/Fetf^Boearrpitel 1Irlaidetenisaa Eesefludf dbtt^edetteiteisilgi ng 

mce HnxiiTtmt Regarding Sectiom 702- Tasked 

NSA n^Mtoht«xlltibd\NddiMiliS(Saimwi^&ivii6ro(NCN8l£li)i(ind 
tile ©iiffcc of the Mnector of National Intelligence (ODNl)aiottdh$y itoife drafting of 
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tbW3lVSD U8e 3024tiiil 



{!#) ;OT f SIW^ | ' I wiSfe detennuKrii r Ithatthe 

tftrgk^'trse i- off jcptie dfyhe §giggj®$| ftavetei IS tlfc e U M I 

| ^ (the sdtotpraassa ffafttddW ttbtthdJ.S. travel!),. Ibe 

analyst hflVWver, MiSfS&tyrlcnlly d idfirottilictatk llfec tfther |—— | | gt£felors| used by the 
target. NSA discovered! IttiisfeFffld fr ~| and dddste j | the 

same day. T he continued ttaiJinggof the [remaining ssdteatoflwas not discowrf uumbitlil 
1 [whan [the selector! was immediately dfcttaklcdd. 


(U/1'FTOUO) Action talhaiitibo mMigate recurrence The target office [was] remirauW of 
the need to identify and innimsaSmtelly dla3Lti&U< alll tfecjlltiessuBcsdcby a target when the target 
is found to be in the United States.. 


(U/ f F OUQ -)- NSA ditefl not issue aCcmgjmskDraEkhaotifata&icmbilMLthtfciitidiidsdent. The 
incident weEEsih«tiid4dd in the Semiannual Report oftlke Attorney General Concerning 
Acquisitions under Smtlimi 702 oftlke Foreign Intelligence Surveillance Act „ dated 
March 2M)M. 


:2:QOtbier incitttEntt (tedtiwica&l oaroo; 


(bIPHP.lL: 86-3® 




1^/(1) 

_NfifeA orally notified the NS dDofim 

__ t-?askin| cheeks NSA EWdticis tfelklp ensafeetto 

_Jaccounts ttadtedlfor collecti®® ppuEamititb Section! 702 sire not 

treini iisfcl frtrffl hiftilfc -ft© U S, NSA provided written mtim ctf4!to irtPiddstne NSP and 

theS f-- - 1 

(S/iMT i ) NSA identified! the followiiiu compliance incident as a neeatlltof its ongoing 



to) 

(3)(3)-P-L 
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t)) 

(bM3)HP.lL.889S3®6 
(b|f3)kS® USe 3024(ii)) 
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iHttUifij 


{3W- 3«-3S 


(b)(i 

(b)(. 


iO use 30 



WK3J-P.L. 86-36 

(bjfDVffl) usc-3aaa«i> 



86-36 


-tSitNSA, NSD, and ODNI [at the time] c©mltiinm[dj to investigate lltiisiiwiiddant.TIKhe 
Dcpartmnortt aftJmMiiiiE | fonmrittGdillto continue to infbmm the Commit of additional! 
informadiBan i^adihgglthjkiniciBteras it became aavialihMe. 


(fejtfNF) Supplemental Fiimil As detailed in the prelimimny nmpttec. ,,. NS A determimBd 
that certain SedriiiDm 702 Iselec toisfl wer e not being sent from lMSA-sl | 

h MSA’S 31 | 

I thcreby preventing ! Ipost-ttalfeteg 

'W rydtyrtnB ., I 




Ml 


NS A made a modification to ensure that 
IN-Saftte^= lll=lfi|i#on_t- o- airjsifh 




(bM3)HP-U-.8®6366 
(bPD>SD USC 3024(1] 
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TOP 


(b)(1) 

(bW3)HP!lL.8&63&6 


j j wbjle those fefailies .weaxEtoilfcMlfbr feetfebn 702 l||H sit ion. With racket to 

the remaiimiinj j-^: )j [seleatoni&d, NSA has identitM CTnefiri ngi tin ned period ofrigfanimsin 
the Unoiltodl States by the intended itap’gtjt,whodln laaaaj Idcto^l 


Jaecmiffittf) have been dbtiakledd. 


mi 

mi 


tigate recurrence 

tigate recurrence 


<3]"-^k 86=36 

-S9 u§£ 3024 ( 1 ) 


» respect\tor+ 
respect toj_ 


.(„5L,¥iti JI JuJsi rar vo iacti 0 n-ta k ® to 

fSTTOTTH F jlvum mari of ‘action taKei'to 

[seleetens]] dissaiasgddahdiweNSJAAtklstseibdtdhdiamfliiJ^stltifti’fiisfissaeod.cdepithith 
commwmiftattQTOs aaqqmtddv^hhMeLiasES-^WEa-eoofflay h ave been in the U&. wore added to 
NSA's Master Purge List (MPL) in discover sMtiss 07 }l | 

“tMNF) The notice also stated fettDoJ would inrtiddctitilsi issue in its quarterly roppmttto 
the Court regarding $<sutarn702 compfcnxae aaceureoueesaiauhdlhat the report woonM 
confirm that NSA had added the commurrakcatiiDTis to the MPL in purge State. 


(U/fFOU©? NSActtth inrtiHmKaaQSng^KasiodahfltdofifttttoiomlahauhiJiiadidHdcnt, The 
prelinmary inaaidkntt of non-compliance was iimdkdteii im ttte Semiannual Report of the 
Attorney (GjmwxdlCXdmeetmggAfqafmsitiitiMs^^ 702 of the 

lntelBg&me Surveiltlmmx Act,, dated MatxHi2D0 ikl. 


(U) NSA Us® of ffw FAA §702 Autitomtl^y 



(bMShPJL. 86.36> 


m 

(bM3)HPIL.886386 
(bPf-SO USC 3024(ii) 


NSA Mim§trimttlM^A^W2aamtoty)ptwM^s6i§iifl&«B3f(i^gign 
intellig ence irtiifbnnaiGLOB related to t he lfona han inMllggntee gaa teOTiasssaftedtifidd in the 
}FAA §702 eWficatiois. T^eF~^dWficatifeiis dtywstl | 


(U) Metkaxtis LiisetitbcAssess EffectiwEmssss 


(U/ /FOUO) NSA imahttaras awerretyy of statistics sdkterfl to the FAA §702 authority 
that A®w’tHeo:»vcafHlIcanntiHbtitioKis to NSA SIGINT m^pminig.HTBWcoHBJotHci'Svahlec 
and use uspaittss, aid the umqiweiacesss to foreign intelligence imfimuHtirmi FAA §702 
provides. Data presented in this report isifm-caleradlai‘>^!20OJ3,unli^sso(tll®cKigee 
noted, and statistics aie limited! to NSA reporting. 


(U) FAA §702 conhriteuttoms to SIGINT importing 

(HSf/Slli'RJEL TO USA, FVEY7 As Figowsss 9 and 10 show, inforaiatitsm afetatmadd 
Wfrif under &AA §702 its Alste^yafld^gywiwgigstSdtos e &f report Ate fefdpi to 

(ri)f3}-P.L>®6»36 U.S. sov etiwttent eonsutaacs and frUied foreign <aavermiaepts. Of the itaaretthan 
■ ) SK3IW reports iBswerid iin caleiidafyyeagdG i 3 ,p | pereantt wenefcasiUimi 

whole corim paitt on FAA §702 informationi. 


107 Tig /ALflrFit 

—, IM , 

r** r** r** r** rs^ r+* r** r** r** r** 

n (Mw*4- 86 - 36 
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(wm 

(b)0^p.L. mm 


(TS//Sf//RCL TO USA, F¥ E¥) f 


(U) Figure 10. SIGINT ffteqsxrt^s SeseldiiiirA/VMbtele or in Part 
on FAA§§TXE2 or PAA (EbdltetitiDn 


rro/j'oij'/Rc, 

l to uoa, rvrvj 





(bKD 

(bM3)HPIL.8S63S6 


2008 2009 2010 2011 2012 2013 


ffSwawRBt to tm: rw ry 



(U) Fi&ires 9. Totall SataKMT UtefpartisIsIsmDbcii ©M2T02Q13 



r^bWHLL \ U UUA. r' u'LV ^ 


10 8 pCV/REL TO USA, fiUft)) When a report is solely souiceaB to an auttocniiitw it iiidiicatiss that a pamtular source 
was used by the analyst but does not mean that the colkotmn was only available from that one source of collection. 
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f ( ' TS'lfS l M '/REL-'fitfO USA.- i RMzY ') During 2013, NSA disseminated aanaaeeaggeofover 
serialized! SIGlNflT reports a monltik that included! infftnianationecdWtoed under due 
FAA §702 cerrifkafttem. 109 


P.L. M>-M (nfll^SmEHL TO USA, FVEY) NSA managennnont tMieves that disseminated i-c^pwtts 
taasaad tan PA A $7Q2 effect ion further the U.S. govennnmsitf's write® taMmgg of high 
priority hteraanataoiahl itipimsm targets. Beyond dissemanattefl reports., collected 
obtained! lurideiFAA §702 contribt 

1 gfggll>gggglgC 




(TSf/SMRM. TO USA, TYDY) On average, during 2013 NSA lissemattatei | 

SIG1MF reports per moeiii oOTseming international)! rrimmsmthat include infomsmtton 
deliived from FAA §702 collection. 


MD 

P)(3}-R.L. 86-36 


(U) Fifliun® 11. TerrotrrBm-^jBBalihc3G3IHTFRf)prtB!£(SuDfoecled/iwith 
FAA §702 InfonnMtwm (D^2D11S 


ffaffs i .vncL - TO uoa. rvcv ) 


jTSTOBEE mSS, EWEv) 


199 (riff®®*©) The minritar of issued repareswas obtained in Noveirikjr2014 from NSA's managemBtltinfciinmaion 
system for SIGINT prodiodtism. The muanbarof reports for any period is net of any reports nascdlktiafter Uiky were 
issued. 
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• fMKWNP) On average, aroffle tHsaril Iselectots werett&dteti 
under FAA §702 during 20111 . |l 


Wfi) 

(b){3)=P.L.®&3® 


(U) Analyst Use of the Authority/ 

-ftelljNF) The FAA §702 authority isutilizBai flaroauffly to suppdrt NSAimssianss. Its 
usefulnessissceanifiifiniBdd by the aBoroesMati ride s,aaswilllistedteidEanhdtahelmimbuibcr o f 
selector ttoitedd to the aathoi% Htasimjccaasdfl l / ~| 1 

since 201 ®.. Similarly, the ijmcn asatseiiiii the mmmtbsar ofreeb orts sourced by FAA §702 


conunifliiniicattixeins flHtsihwreaasdii 


iintlte same pmiiail. 


(U) FAA $702 QSorttrihM/tiasstdtth^&itial^e^BcMission 

(U) In 2011$, NSA neqpntedd to the SumKOBiirnmtaeeooithiidiitlidiaipr^hdtat 
“iinfiranHtiiimggdtbadd finasm Sectiouo 702 of the Ftf&A /AnecriteurttsMcaiMdSSetido n 
215 oftlte Patriot Act, iinn cGanpjhmemt wititoh NSA’ss other authorities, Hjasconntiitjbtttdd 
to the Unjted Stat^gn^nmmQtife’aimitiriBtstHhdgi^fdrteriemsHcthdri^siQBihri^riiam^any 
cases, IhftsewaiMidddttteiMdMppnon of potential tenramifit ewmte at tfhomeiad dlatoiashfl. ” 


(U) On 21 June 201$, NSA ipmuitfadd to several! CorngKaaimiTdl amrtrnititeeesteeririmopy 
concentpig; 54 teases iiini wfliidh tiic^pra^amnHscoaiitiitibtUdd to the THIS, gownmnunttss 
understardltig anH. imimaa^y coaess dterptprini n of terrorist plots ihitHm IMteafi Sttattes 
and more than 20 countries. 


(U) The SIG1NT IBrecCMiatecppoo'idddd to the CHKBciakilititiMsnfe] eMaipjjdes oftlte value of 


FAA §702 colleettwMin to NSA missions. 


L. 86-36 



(b)P)f®5) USC 3024(i| 


TCWP SEGRrCT/ Sh NQtEORh . 
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{lTGI'.'!iblA i '?li l lP) Based on Sectiomn 702 collectkainl ( disrupted the potemtM aatatafc k 



(bM3)M8 USC 798 
(bJPKHS USC 3024{i). 


PTsKtoi/yNr bf 
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(3liREL TO LiS ) AIL-r==========='!..." 

f S. ' . ' SlVREL TOTOAl ~ 


mn 

(b)|3)HP 1L. 830S3E5 
(bJp)MISB USC 798 
{bM3)^9> USC 3024(i) 
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IV.. m ABBREWWTRKM 3 S AND ORGANHZBBTRiXHSS 


(U) ADET 
OJ) A1G 

m Q 


(U) ATSD( UD) 
(U) 


(U)BR 




(U) CIA 
(U) CM CP 
(U) CSLI 
(U) CSP 
(U) CT 
(U)DIA 
(U) DIRNSA 
(U) DMR 
(U)DNI 
(U) DoD 
(U) DoJ NSD 
(U) DTM 
(U) DTOI 
(U) EAR 
(U) EDH 

(U) l—=.=- 


(U) E.O. 
(U) FAA 
(U) FBI 
(U) FISA 
(U) FISC 
OJ) FTP 


Associate IBiceixIsoatatdbr Educatrai and Training 
Authemifes s llntegEtiboiiGroitp 


Assistant to the Secret. 


'Bum metadata 

Business FReocptlds 



MlOTBeSF.. 

Cental Intelligcutne Agency 
ComprdDMmiwE NMssidorCStopiidffiDecPrcggFara 
Cell site location iitfi&raaaaibQn 
Commumkatt inn SsswacePPcoiddr’ 

Countettemram 
Data Integrity AriaiMyfct 
Directoo;, NSA 

Datafflsw IMamyjBnrertt FKqqustst 
Director oci’tNaittimrail Umteill^aicEe 
Deparimnaitt of Defense 

Department of Justice, National Security CBvisioQ 
Directive Type Menansmiutlum 
Date and Time oflhtBmspt 

Emphatic Access sRBa sieidtit)n (h^l)) 


V\ 


Enterprise dat a headier 


. 1 . 


(bMWlC8®S386 


Executive GDdder 
FISA Anrendtmmtfc Act 
FedeiM Bureau of Investigation 
Foreign Intelligence SurveillanceeAct 
Foreign Inddi^gantBe SSavediHnoceCGotirt 
File Transfer PrstoKril 





mrnm 

(U)IC 
(U) 1MEII 
(U) IMSI 

mo 

(U) LAO 
(U) MCT 




IntelligcffitGE QStratamuitjty 

Internationall Mobile Station Equipment Identity 

Intentotanill NUbbdeSubsatiber IB&ntittity 

Intelligent® QSwright 

Legistotiiwc MffirirsGSfJaee 

MuMjplk CGxMnmaniatitiD nT ffinaacJititiD n 
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Master HUrgeeLiafct 
Math Kfossearohlt (Shaun 


)WfF^ 

(U)MSA 
(U)» 
(U) NSD 

(U)GHfflHI 
(U) ansae 

(iW)) ®JefS 
(U) ©IG 
(U)€fTO 

anna 

(U)0 

(U)RAS 

(U)MJ 


mmw reubttffcPtwisai 

National! Security AgadKy/Mfenltral Security Service 
NSA 

National Security HDrashwi 
National Security Operatiiws Cottar 
Office of the JEteatf tmodiN Nioraii alnl ath|iegieac e 
Office ofttte Director ofCG'otpHtpdhoK c 
Ice @#§gflgf§i g@ttfj§§i 
ffice ®f the Inspector Generali 
Obligatootn to Review' 

Public lte^y i nffitasttiatatiree 

Associate DiBeettfflnattc ffiarSSccttitrjyaaiiild Coumterimtdlljtgpm^ 
Reasomaitete AntfiaiJMfite S&isfpoiam 
Request for i imformation 

L 


Tmatkm 

ormanon 


services 

services 


(U)S 2 

(U)S 2 H 

(U)SHM 

(\3)& 

§354 
(U)SCA 
W) : WF 1 F 

(u)[7 


info 

mro 

Analysis and Production 
CountenteMMBiri ffioidiiMttdmnCIeeteer 
Homdaud Seoinitty AnallyBk Caaittor 


TO: 




Special omnpllkKteeaadttit^y 

Sensiflvg Cmpmmwmd 'l Hfowaaftw M 



(b)(3H».iL.®63K 


\ 


\ 


(U)sm© 

(U) SHG1NT 

(U) 

( V) 


Signals Intellig’opce Directorate 
Signals MHtlgepce 


(U)SO® 



Sominr Operations Officer 


M l \ 

HD 

(U)SV 
(U)TE 
(U)t mm 
(U) Ten 
(U) T1B333 
(U) TM 
(U) TD 
(U) TR 
(U) TS 
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■ 
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■ 
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■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

■ 

(U) TV 

TTO.Office of CompfettK® 

(U) TV4 

Compfliiataasceand. .¥©^jfifistatiwn 

(U)USD(I) 

UnderacoKEttea^ydf Defense ffitkr Intelligence 

<U)U§f» 

U:S: pf§0ff 

(U) USSID 

U.S. Sigmafe Inteliigancus CDdcetive 

(U) USSS 

U.S. STK0MT System 

our 

. .—.“ 


VfetfSfic&t'ift’rr 0f 
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(V) APPENDIX A: ABOUT THE §215 AND FAA §702 REVIEW 


(U> Resaajm for Review 


(U/fF QUQ f In Scptemflsar2M B3 tdeirmiobdrei's of the ^rnteGSdaomittHee on the 
Judiciary requKsaterii ■& <O 0 n}pT$®m£vec. iiiddppmittetitra’cremv of the iin^hmraMiffltdion of 
§2 L5 of the 1LDS& PAlMBSir Ami andd§5?0Q2 of the BxBKigin Imttdllgpntec S&ncwllianec 
Act <^[HTI^)MniiQBddimtiJtsA.AtcftF( i 4fAA) ofZfflOQS for c^knttiary^OBs'SQCC)0tlthrog^!2f2M3. 

(U) Objectives 


(U// FQOD) In Janwary 2014, the Matikmd] Ssmnti^y A^ni^iCGintititil SSeoiintttySSenac's’s 
(NSA) (Gfffbec of the Inspector General (OIG) and Comm acre sfflrffffa^eeddtHaattttm 
NSA (ER5i\w®iilidkJ iTOYimv NSA'ss implemontairnri oftatth authorities loir ccdhuitlaiyyaeii' 
2013. The study has tihuee objectives: 

(U) Objeettirce I 

• (U) Kesxnrhic how data wasooilicCdidd.ssbcffddtitMl^lyzbdlidimtimitiEaltcdiudind 
retained under tfltefpfrnKesddnnces ftfw r §^2211S and FAA §702 authorities in 
effect iin 2013 and line steps tt^kni to protect US Person ihfformaiomi. 

• (U) IDesoriiltetHtereeatiidtitiDiis on using the data aiidliimuhhffeiaBtdoliffins 
have Itemi mp|bdoraotudd jriahlddigga aittesepiptron of the (ihttuixsfpoait)®ides 
and the controls fffiraaeessmggddata. 

• (U) DesailbetttWKE^hbtaniddcooippliiM^ 

and external organizations in support of §215 Foreign Ifatedllgpiroee 
Surveillance C®untt(ffrBSD’) Orders canti§702 minimization 
procedhmffis. 

(U) objpBtiiwe nn 

• (U) IDtesmfaci liooidots s of non- compliance with §£2115 FISC (OdbrBS sand 
FAA §702 CtartMcations and mfattlffffiAhlaasddnnc to minimac nffimiruntcc. 

(U) CBgptttiMffi BUI 

• (U) IDtesailitehb&vaaiifli^^tstsusstdididatkta to support their iintdllgcmce 

IMfggtMlS. 

(U//F©ee$ The ntqpntta&l&o prowdies cflssimnmfiyy of the dliaigpssnmdddn mlthe 
implemaittaiian of both aitfherticss J&roaMoridaryyaarSQOOOthhDOgtiiEdlH 2u®Mofor 
§215, allkt(dhmdidxtHts)M)n 0 aorofi)hipitaii&ff (foteodlcTTdatrs r '2Qil^2Bikftiglhrt2.(hll2.2012. 
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(lLJ v 'ffB@)UQ -) Our study affNSA’s implementalkim aflthe §SeataGEm215 and FAA §702 
authorities was based largely on program sttdldtoddderinterviews and reviews of 
policies and procedtomas and other progianm dsnumsitKltowi. For this rmvifiwv,tltoeNSA 
OIG docunmaned the contrails implemented that address the requiresmaitte of each 
authertjy. However, we did not verify thraw^h ttestag whether the controls wtaxe 
operating aasddsscilibddby program sttdckdMddKrs. 


(U) Section 215 


(bH^P.L. 86-J6 




(U/ fFOUQ ) Our §215 review focused oaMtlthtflMdTSW^prg^mrcammfdiaftTaM'erkoi'k, 
incideratte odfiraimHaarapiiiaine, and NSA’s uwse ofitHecamlfica'rt^y to support its 
countatteinarrBun (CGTlmiiBsisioin 2013. To docurnoitt the BRFISA (armtoil 
firamewfflirfk- we used BR Order II3-11 SB, approved by the HE&Ecnnll Octoter 2013 
and effective thraweglh 30 January 2014, and the rtqttirtffittiMifc Uteeddln that 

Order’with.Jhe processes and contrails NSA used to maintwm aam^iliaHcewith that 
Order.. In addition;. Hive documantsil tH®eotiaaggesimplemented iintttaeEHRFISA 



T^bmplattoe (T)IKX7));"tthe ^idhnfitiss IiIniggmtmmGroup (AIG); the LegislaaUik® 
Affairs Office (LAO); and the Office of General Counsel (QGC). 


(U) faa 

■f TSt/SMTIP) In additkra to FAA §702 stakehofldar imtewaeswsand reviews of policies 
and procedmnieE and other program documentMiiim, iiiftxDraaait)onohtUiiioddiinltb<OIG's 
AssernnwrttoffKamggmnBhtConlnwIks Over FAA §702, revised and reissued 
29 March 2013, was also used as a resource.. That review examined thaeoDamtotelsthat 
NSA used to maintain (lampHaaneewith FAA §702 and the targetihmg and minimizattirm 
procedures asssttriiatddwith the 2011 oniti if halt ions. 


fFSIISItfWff? Our FAA §7(K lewikesw feniESstlon the processes and controls in place in 
2013. Two primary ckkimuantSsfiled annually wiilJiaasjbhFAA §702 certificattman 
comprise NSA’s procedures for complying witWitfteeHF£SAAtom 0 dditffit$ts\AalfcffQQ8):8: 


• (UEH j - QUO) The Proaedums Used by the Natiomd S&eautytyifagwwfjjbr 
Targeting Non- United Stwtes PEemmdli&mBahtybfyelltetedvtedbe Located 
OutsMe the Uniited States to Acquaints Foreign InteUifganae Itftfarmtitohon 
Pwrmmrttto Sectimn 702 of the Foreign InteiUlqgBmee SSimiMhmcdcAof1978, 
as Amended (FAA §702 Targeting H?D«ieddregfc) and 
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ST-H4MMMB2 

* (U/ /FOUQ j) The Minimimtiion PFeoeddtmeUsed by the Nattemdl Smmtty 
Agemgy in Cmumdtiwi with Acqumtiwm of Foreign In teMihgcmwe Infmmuti'un i 
Pummrtlkt Section 702 of the Foreign llMttt$gtmc&i&i^bill<m(&ctAiftl97$, 
asAmem&ad (the FAA §702 Minimization PtaBedluuiies;)). 

(U/IFOUO? For calendar year 2013, the period uwlleir review, different versions of 
these documents were inn dfifartt tteaaisseof changes made with the anmrf osmtiffuatiKiii 
renewal and special amenilmait&. 


P)(1) 

(b)p^LL.8$63S6 



(blPHPlL .886386 
(bN^SD USC 3024<i|) 


(U/'tp QU6) FAA §702 Targeting PiraxaaikjiiiiEs 

O (U/ ffgMil® )- ) Hfrmarihrecs approved with the 2012 rem&vall of the authority, 
effective 24 September 21)112 

0 (0U///f %DUQ 4 These procedures were not changed fordhe 20)115 ceetrittirftratition 
renewal and iKHnaiinail eff&Criee 10 September 2®) 113 tlhtxai^h©SS^tenlDl29T 
2014. 

(U/ffOUO) FAA §702 Minimization Prrocedoinnes 

O (S//HW)) Procedures afpowrail fftnrthe 2012 certification nenmail, apppovedd 



(U/IFOUO'f We also traairrimsil iinp^)feaaii®rtiitiiimEgppiFOcddui®sarKiidoiitrols for the 
Attorney (Gfemandl's targeting pumtellinEas. 


(U/fF CTlLBQ t) We iinomvmvffitl pperennofeliinSID Policy and Corporate feruies SS&fff 
rS02 ), SW. Analysis andlPUddudtion) SSgSStfffhnd Product Lines. Data Aamuigifinn 



) 


(U> Prioir Covercagpe 


m Mybii eapa»iiesS(T-i), QDQC the LAO, OGC, 

{bM3)HP>.LL,886386 


1 


(U/|p€§PB>)) Since 24 May 2006, (the date ttoecorrgrindl BIMTIdldeiwasisisigi^dththfe] SMS A 
OIG has completed fee BR MSA program iKwmvss. laUdlE A-l summarizes the 
reviews tiheNSA OIG has performed rona ine BR FISA ptspatim. 
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42imrm 


T < Off SECRETi/SI ! 7?>aarORN 


ST-14WKKK2 


(U) TaWte A-1. NSA 0110 Rtexiews of the ffiRRfflSft Pnagjsmi 


hf j 


Date 


OIG Review 

Scope of the Review 



09/05/00 

Assessment of Management Controls 
for Implementing the FISC Order: 
Telephony BR (ST-06-0018)) 

Reviewed collection,, iprai^ssiiirng, analysis,, 
dissemination, and owsi^aHnltcite 

05/12/10 

NSA Controls ffeurFEKC BR Orders 
(ST-1HMBTO) 

Reviewed giweiryirng and dsseiiihrGtftGiiTn 
controls; summarized pilot test results for the 
period tom itemamy fnrough JWteKtti2010.. 

05/25/11 

Audit of NSA CmWIs to Comply with 
the FISC ODdferFEteprKdnrag GBR 
(ST 

Reviewed (querying and dliis®ffinmihnsettdmn 
controls; ttemnamtlftlyttolreealtas 

for 2010. 

10/20/11 

Audit of NSA QiwMIs to Comply with 
the FISC ®cterH?^pmilhn® GBR 

Retention (ST -HH-ffiBDI11) 

Verified age-off of BR FISA nnnaatat&te in 2011 
to maintain compliance with titee^Dmimiltn 
retention requirement of the BRCGmtfer 

08/01/12 

NSA Controls to wiitth the FHfSJD 

Order Regard mgj BR Collection 
(ST-12-0003)} 

Reviewed ©olllledtibn and sampling controls ffor 
ensuring that NSA recoil OTljytttee BRFISA 
metadata 

* This n^ramttsa.1^^ m^thjyttefclreesiihs of the BRGp®n^Tii^ armcsli c^sssaafTTiri^toam (EffiHttnJte during 

2010. 


(navcBff i r) 


(U/ fFOUO) Since dte^^arrcgy ®tttaiiHdi FA& §§7)002 autHxmi% inn Jfemar®' the 

NSA €MIiHMScD(i^iymddaannubl'a^r<^'SD&€pqiwt33iitiiiMiigiiTffifBi'fe»tsatces to USP 
identities and targatss later cfasamitindl to be locate! in the UWtofi Stated, assragpiredd 
by the satautec, Table A-71 aunmaiiiiess tloba\tworm'a®wsthfec NSA <DMu Hmscoamplbdtadci 
oftlte FAA §702 gnaqgpanm. 


(U)Talblte A-2. NSA OIG Reviews of the FAA§7®2 Progratrm 


(gt ' UJO 


,x* 

OIG Review 

Scope of the Review 

3/29/13 

(U) Assessment of Management 

Controls Over FAA $^({BF41110009$) 

(U#£P \JQ) Reviewed management aanttatts foir 
maintaining compliance with sm b 

minimization procedures. 

| 


■I9R1T31 


r 


1L *v.».• 





mn 

(blPHP-lL .886386 
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BQCHD: 427387m 

ST-14-M2 


TOP S-BltfHlBilPiMiSlI // N 0 F 0 R N 


(U)) APPESmVK B: BR FISA PROGRMM CHAItUHEB 

20II (D-22X31>2 


(U) 201(9) 


• (U/ /FOOO FOn 25 Ju ne 2QWf 

fflaMggHMM 

* w 


1nSA b ss RAS sdhmtcari tsarcroi 

I 


Jthe Order n^iiiranantt ii^awRJin^ tfeiwmttafr of 


.iCV 


11 V 


Sijatlysts allowed to access BR metadata was lifted.. 

Jthe Order requirement for weekly reports of 


JM3)-PjL. 8$.-$$ BR-ndktaS disseminations was cdten^ttii tcoiTKmfmblhja’. 

" t)i\ i 


WN h \>\ 

\$k'- 


* >v (V 

■ 


lut/remii 

l.".MMM J 

1 I 


[II L 

b| 

C 




Inn ii 

-,— !L-II 

Primary 

repoeitS 

Irjy H 

r! 

ife 

tail 

s 



(U) £$12 


i ^/p^)E 


* — - -”11 fee fgpifeffleat fev NSA f@ mm 

bfimitolisobbairiBddwaaschhaggdd to a revfeW ofW®6!ss monitoring and araBEssamnaiit 
toatrairee that amity approved metadata is billing afptired. 

n^ftfeed lllS CoiJrt | • 


\ 


CH//TO^0’), 


tNS A notified the CDorfril" 



Mffflfeje! 


automated querying process. 


TTO" 


) the Court MSA to implement an 


110 (uy /rou e) ) NSA is no longer authorized to use the automaton query' process siimasit withdrew its request to do so 
in the renewal applications and declanawn®that supprmtt (IthtfiR Orders afpiawatlby the FISC (begisning with BR 
Order 14-67, dated 28 March 2014).. 
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DOC MU): 42imrm 


Tor SECRET! 1SI1 ? Si Q PORN 


ST-14WOBE2 

• (U/Z TOmO H On 29 Noxwtioaar 3®B2,.tH«d3Bdder3^qirrosKraiit to track and report ttte 
number of instances, since tflEgmcediiigi ragratt, in whjch NSA lbs® shared, in any 
form, results fan queries of the BMimatafata, imaaqyf(&iniu,wHhiaa^y)OQ©uteidide 
NSA wuBscdirargEdd to apply to only sharing of query results (hat contain 
U.S. person liiAinnsation. 
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DOOD: 427M7714 


TOff * SBflR E TY/gW QTOR T V 


ST-14-®B82 


APPEIOTWC C: BR FISA PROGIFMttH/1 INCIEffifTBS OF 

MotwmmmmeE 20m THmoimn 20112 


(U) Table C-1. BR FISA ltodterfiis2Q()90 thirau^ 2012 



Descdiptlran 


W(1> 

IWf,B)-P.L. 86-36 


* (U/HPSrtAO) On 1 November 2010. Finite 10{b) and 10(c) notices werarB^taBKtlby Rule tG^arti 
13(b) notices respectively. _ 

/ ppsest Final Ry|@ W$) _- - - 7 ^-— (b ( 

? CU/ /rouo) Supplemental suiteH3((to)) 

I (U/fl=eae)-Hinall Mte 13(a) and 13(b) notice^^^^^^B _ 


(Tooanwr) 


3)-PX.®S3®6 
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BOCED: 427MW4 


TOr SE i CRCTI/SMMBroRN 


ST-14MWM2 


(U)) APPI 


ai 'in 


»( D: 


FAA §702 PROGEffm CHMJJSffiS 


(U) MinimiEsakian Proc®aHuress 


(U) 2011 

• (U/ /T0001 Langonagp on upstream dfctteaafcftfaiito Minijmmiizattittm IEoaeddnres. 

• (U//FOUO)) The reteolkni qaehbddfor Upstream DKnfiais reduced to two years 

• (U//F0H6) Qani find! thhUt 1th (five-year retenfam ppeiwddfor unevaltaattsil ddteka 
began to run from the date of expiratisoiu of the certificantiam unddcrwWrtctolilibdalata 
was collected. Prior versions did not specify wtanr H^FreeyyQaiperiod began. 

• (U//FOUO| PennmmtitHil qt^iaesussig^LISSRddQtilSfnErao identify and select 
commimnc&iboiBS. Requires qpceB^ppTOHkbdrfeferany queries aroemade. 

Specifiol% cexldddesqqodideaggmEtstifK|Distafflaniata. 

• (U//POUO) Adds requiremnsitt to segregate Ilntenmett itnauHctctiiHi that cannot be 
reasonably i dfatetritintoddas containing si incited ifcxatctc aranrainniiu ktutiisn s. 


(U) 20112 


• (U/ fl F QUOf Limjted access to metadata from Internet ttmnaaBtibkiiHsto data acquired 
on or after October 31, 201 J. 


mw 

11-36 


• (U//fl€WUOTTAdbll$ specific requiktrartante for DIRNSA dfetrnnraaaitaontlttoaa a 
domestic oronmaramaatinncaiabe retained. This includes airoqpncemuntthat 


DIRNSA ffres td (teteminm eh at the sender or redydiant of the domestic 
communieatMti was property teageteddunfeeFAA §702. 



(U) 2013 


mu 

(biPkSD use 3024(iD) 


(U) An amendment to the MmimzMitdonppiraoMuTsesvas made in late 2013. A 
section was added qncd'ikidkBggNSA from using inforainatfein aacjqimddp ipursuartto 


FAA ^02 unless NS A to»;imcs, bated on the tefcSljiy of the fittimnistanccs, that 
ttfe target ti reasomlfefly Wha^dto be outiidtethe United States at the time the 
inform atiap was acquired. 



{bin)) 

(blPHP-U-886386 
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ST-14-flM 

top SEqwrrw//NOiwwftw- 

(U| Otherr Charness 



(U) 2(012 


ffS/fSi/f?W) Congress notified by NSA 

// 


(bMD) 

(b)PHPU-386386 

(bMD) 

(b)PHP-U-386336 
(b)X(3)b®D USC 3024(ii)} 
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